Bug ID 749689: HTTPS monitor sends different number of cipher suites in client hello after config load and bigd restart

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
13.1.0,,,,,,,,, 13.1.1,,,, 14.0.0,,,,,, 14.0.1,, 14.1.0,,,,,, 14.1.2,,

Fixed In:

Opened: Nov 14, 2018

Severity: 3-Major


HTTPS monitor sends different amount of cipher suites in client hello during SSL handshake and sometimes back end server fails to find a desired cipher suite from client hello. As a result, sometimes SSL handshake fails and monitor wrongly marks pool member down.


HTTPS monitor might incorrectly mark pool member down because of a failed SSL handshake.


-- Have an SSL profile to be used by an HTTPS monitor. -- Load the same config more than once.


Restart bigd using the following command: bigstart restart bigd

Fix Information

HTTPS monitor now sends a consistent number of cipher suites in the client hello message during the SSL handshake.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips