Bug ID 671639: TLS1.0 & TLS1.2 performance will be different in the Cavium & Intel platform

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Opened: Jun 29, 2017

Severity: 3-Major

Symptoms

From the most recent performance test result, we notice the different performance behaviour between TLS1.0 & TLS1.2 in Cavium & Intel Platform: 1. In the Cavium based platform: ********************************************************* TLS1.2 10SID TPS up to 10% *LOWER* than TLS1.0 performance ********************************************************* 2. In the Intel based platform: ********************************************************* TLS1.2 10SID TPS up to 10% *FASTER* than TLS1.0 performance ********************************************************* This is due to the Comment#10: ********************************************************* In the Intel based platform, we use the SW(CPU) to do the SSL handshake. Whereas in the Cavium chipset, we use the HW offloading to do the SSL handshake. *********************************************************

Impact

No Impact. We write this ReleaseNote as a Head Up for the Customer to notice the performance difference between the Cavium & Intel platform.

Conditions

Test the 10SID Performance using TLS1.2 & TLS1.0 in the Intel & Cavium Platform respectively.

Workaround

N/A

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips