Forum Discussion

  • Yoann_Le_Corvi1's avatar
    Yoann_Le_Corvi1
    Icon for Cumulonimbus rankCumulonimbus
    Apr 12, 2019

    Hi Sajan

     

    SSL/TLS sits "on top" of TCP. And FastL4 vs takes care only of the connection part of TCP. Not layers above. That's why.

     

    If you need more perf (and less control over L7 layer) you could use Performance HTTP.

     

    Any precision required let us know...

     

    Yoann

     

  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Apr 12, 2019

    Hi Sajan,

     

    the reason for this is, that just the Standard Virtual Server is able to establish two independend TCP sessions (client / server side) to negotiate the SSL/TLS channels on each of the sides correctly. A Performance L4 Virtual uses just one TCP session in pass-through mode...

     

    K12015: Configuration requirements for SSL virtual servers, profiles, pools, and monitors

     

    https://support.f5.com/csp/article/K12015

     

    K8082: Overview of TCP connection setup for BIG-IP LTM virtual server types

     

    https://support.f5.com/csp/article/K8082

     

    Cheers, Kai