Bug ID 1127725: Performance drop with the AES_CCM 128 cipher

Last Modified: Dec 07, 2023

Affected Product(s):
BIG-IP Install/Upgrade, LTM(all modules)

Known Affected Versions:
17.1.0.2, 17.1.0.1, 17.1.0, 16.1.3.5, 16.1.3.4, 16.1.3.3, 16.1.3.2, 16.1.3.1

Opened: Jul 20, 2022

Severity: 2-Critical

Symptoms

On all BIG-IP platforms with Coleto Creek - Intel Crypto and Coleto Creek DH8925CL chip present for Hardware cryptos like i10800, i11800, i5800, i7000, i15800, i4x00 platforms and VIPRION, when AES_CCM 128 ciphers such as TLS_RSA_WITH_AES_128_CCM are used, there will be a performance drop when compared to previous releases.

Impact

A performance drop of up to 30% and an increase in CPU utilization occurs.

Conditions

The AES_CCM 128 algorithm is configured.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips