Last Modified: Nov 07, 2022
Affected Product:
See more info
BIG-IP LTM
Known Affected Versions:
11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0, 11.4.1, 11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.10, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.5.3 HF2, 11.5.4, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9
Fixed In:
11.4.1 HF9
Opened: Mar 23, 2015
Severity: 3-Major
Related Article:
K24448194
When loading SSL profiles, some of the large elements (certificates, CAs, and CRLs) are not shared among profiles, but instead, they are loaded per profile, causing inefficient memory increases.
The extra memory used cannot be used elsewhere, potentially decreasing the maximum number of concurrent SSL sessions.
SSL profiles are used, especially with CRLs and (to a lesser extent) certificates and CAs.
None.
The large elements (certificates, CAs, and CRLs) in the SSL profile are now shared among SSL profiles, decreasing overall memory usage.
