Bug ID 499946: Nitrox might report bad records on highly fragmented SSL records

Last Modified: Nov 07, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.10, 11.5.2, 11.5.2 HF1, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4

Fixed In:
12.0.0, 11.6.0 HF5, 11.5.3

Opened: Jan 07, 2015
Severity: 3-Major
Related Article:


When using an AES-GCM cipher on highly fragmented SSL records, platforms with Cavium Nitrox cards might report Bad records.


The BIG-IP system disconnects Client SSL connections prematurely. The SSL profile shows a number of Bad records.


The negotiated cipher is one of the AES-GCM ciphers, and the MTU is such that the SSL records are highly fragmented.



Fix Information

The processing buffers reserve the proper number of subsequent parameters.

Behavior Change