Bug ID 600827: Stuck Nitrox crypto queue can erroneously be reported

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.4.1, 11.6.0, 11.6.1, 11.6.2, 11.6.3,,,,, 11.6.4, 11.6.5,,,, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2

Fixed In:
13.0.0, 12.1.2 HF1, 11.6.1 HF2, 11.5.4 HF3

Opened: Jun 22, 2016

Severity: 3-Major

Related Article: K21220807


In some cases, a stuck crypto queue can be erroneously detected on Cavium Nitrox-based (Nitrox PX and Nitrox 3). When the tmm/crypto stats are examined, they show no queued requests. The following message appears in the ltm log: Hardware Error(Co-Processor): n3-crypto0 request queue stuck.


The system reports device errors in logs, and takes crypto high availability (HA) action, possibly resulting in failover.


This issue occurs when all of the following conditions are met: - Your BIG-IP system uses Nitrox PX or Nitrox 3 encryption hardware. - You are making use of hardware-based SSL encryption. - The BIG-IP system is under heavy load.



Fix Information

The Nitrox crypto driver uses a proper timeout value for crypto requests.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips