Forum Discussion

Yazid_Abdesslam's avatar
Yazid_Abdesslam
Icon for Nimbostratus rankNimbostratus
May 11, 2016

Traffic over VS (https) is slower than servers directly

Hello,   I'm Using F5 Standard VIP, protocol https configured ass SSL offload (Termination) which means that I'm decrypting SSL packets on F5 Box & sending traffic to an http pool. Actually this c...
LTM
security
Yazid_Abdesslam's avatar
Yazid_Abdesslam
Icon for Nimbostratus rankNimbostratus
May 11, 2016

Hello & thank you for prompt reply,

 

as mentioned in my question, I used these tcp profiles but still having a latency on ViP

 

I attach a capture showing difference between VS & physical Server

 

 

  • Yazid_Abdesslam's avatar
    Yazid_Abdesslam
    Icon for Nimbostratus rankNimbostratus
    May 11, 2016
    I tried with pool using different tcp port 7010 so servers actually listens on port 7010.
  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    May 11, 2016
    In https, your browser try to check for revocation status of the server ssl certificate. Did you do your tests on a browser or through a command line like curl ?
  • Yazid_Abdesslam's avatar
    Yazid_Abdesslam
    Icon for Nimbostratus rankNimbostratus
    May 11, 2016
    Yes, I tested in Firefox & Google Chrome Browsers. even Curl command shows the same latency. (about 4 to 5 seconds to display/download) but directly from server, that works fine (less than a seconde) regards, Yazid
  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    May 11, 2016
    Maybe something stupid, but did you check the speed and duplex on interfaces of your bigip ?
  • Domai's avatar
    Domai
    Icon for Altostratus rankAltostratus
    May 11, 2016
    What tool did you use to capture those response times?