Bug ID 514017: There is some memory bloat when loading SSL profiles

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.0.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.5.1 HF1, 11.6.1 HF1, 11.5.1 HF2, 11.6.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.6.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0, 11.4.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10

Fixed In:
11.4.1 HF9

Opened: Mar 23, 2015

Severity: 3-Major

Related Article: K24448194

Symptoms

When loading SSL profiles, some of the large elements (certificates, CAs, and CRLs) are not shared among profiles, but instead, they are loaded per profile, causing inefficient memory increases.

Impact

The extra memory used cannot be used elsewhere, potentially decreasing the maximum number of concurrent SSL sessions.

Conditions

SSL profiles are used, especially with CRLs and (to a lesser extent) certificates and CAs.

Workaround

None.

Fix Information

The large elements (certificates, CAs, and CRLs) in the SSL profile are now shared among SSL profiles, decreasing overall memory usage.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips