Bug ID 595966: SSL hardware acceleration statistics might be incorrect.

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Fixed In:
13.0.0

Opened: May 26, 2016

Severity: 3-Major

Related Article: K47622090

Symptoms

On a BIG-IP device, hardware acceleration is still showing as 'Full' for some ciphersuites that employ a combination of software and hardware acceleration. It should be showing an acceleration type of 'Partial' in these cases.

Impact

No impact to any other module

Conditions

When some operations (such as handshakes) happen in software while others (such as bulk encryption / decryption) are hardware-accelerated, for some ciphersuites.

Workaround

None.

Fix Information

Hardware acceleration statistics will be incremented as follows: 1. If all operations concerning the handshake and bulk encryption are done in hardware, the result is Full. 2. If some operations are done in software, while others are done in hardware the result is Partial. 3. If no operations are hardware accelerated the result is None (Software).

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips