Symptoms

When client SSL profile has "cache-size 0" the SSL functionality fails to include master-secret in the F5 Ethernet Trailers (f5ethtrailer), thus not being able to decrypt client-side traffic.

Impact

The "cache-size 0" indicates that BIG-IP do not memorize any session, TMM disables session reuse. No renegotiation is provided even it is enabled. No "session ID" should present during the SSL/TLS handshake.

Conditions

Client SSL profile has "cache-size 0".

Workaround

Use client SSL profile default cache size.

Fix Information

None

Behavior Change