Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Sajan_Mania_381's avatar
Sajan_Mania_381
Icon for Altostratus rankAltostratus
Apr 12, 2019

why can't we use Performance L4 VS for SSL bridging .

Why can't we use serverssl profile with Performance L4 Virtual server type ?What is the reason behind that ?

 

2 Replies

  • Yoann_Le_Corvi1's avatar
    Yoann_Le_Corvi1
    Icon for Cumulonimbus rankCumulonimbus
    Apr 12, 2019

    Hi Sajan

     

    SSL/TLS sits "on top" of TCP. And FastL4 vs takes care only of the connection part of TCP. Not layers above. That's why.

     

    If you need more perf (and less control over L7 layer) you could use Performance HTTP.

     

    Any precision required let us know...

     

    Yoann

     

  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Apr 12, 2019

    Hi Sajan,

     

    the reason for this is, that just the Standard Virtual Server is able to establish two independend TCP sessions (client / server side) to negotiate the SSL/TLS channels on each of the sides correctly. A Performance L4 Virtual uses just one TCP session in pass-through mode...

     

    K12015: Configuration requirements for SSL virtual servers, profiles, pools, and monitors

     

    https://support.f5.com/csp/article/K12015

     

    K8082: Overview of TCP connection setup for BIG-IP LTM virtual server types

     

    https://support.f5.com/csp/article/K8082

     

    Cheers, Kai