Forum Discussion

Chris_Phillips's avatar
Chris_Phillips
Icon for Nimbostratus rankNimbostratus
Jul 12, 2022

TLS not being offloaded on VIPRION

Hi, I've a new VIP on a VIPRION A109 running 13.1.1.5. I'm aware that on this platform ECDHE ciphers can't be accelerated so have changed from them to AES128-GCM-SHA526:AES256-GCM-SHA384:AES128-SHA256:AES128-SHA but still 90% of my traffic on both client and server sides are having TLS handled in software, 10% in partial. absolutely none in hardware.

Are there any obvious gotchas around this, as everything I can see should say this should have a huge performance benefit, which isn't happening.

EDIT - I've since found that it's AES-GCM ciphers that it's still not liking. Using the CBC other ones explicilty, i do see full hardware acceleration. But the documentation states AES-GCM should work fine?

4 Replies