Last Modified: Jul 13, 2024
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0, 11.4.1, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.5.3 HF2, 11.5.4, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10
Fixed In:
11.4.1 HF9
Opened: Mar 23, 2015 Severity: 3-Major Related Article:
K24448194
When loading SSL profiles, some of the large elements (certificates, CAs, and CRLs) are not shared among profiles, but instead, they are loaded per profile, causing inefficient memory increases.
The extra memory used cannot be used elsewhere, potentially decreasing the maximum number of concurrent SSL sessions.
SSL profiles are used, especially with CRLs and (to a lesser extent) certificates and CAs.
None.
The large elements (certificates, CAs, and CRLs) in the SSL profile are now shared among SSL profiles, decreasing overall memory usage.