Forum Discussion

Niqichick_13681's avatar
Niqichick_13681
Icon for Nimbostratus rankNimbostratus
Oct 31, 2013

TLS 5 second delay before establishing TLS client Hello

I have a configuration for BEA Weblogic that is configured with a "one-armed" configuration, AutoSNAT, and SSL passthrough. When my clients come to the VIP they are experiencing a 5 second delay. Whe...
BIG-IP Access Policy Manager (APM)
deployment
oracle
security
Niqichick_13681's avatar
Niqichick_13681
Icon for Nimbostratus rankNimbostratus
Nov 01, 2013

I have tried both Performace and standard with no change. I am seeing the TLS Clienthello from the VIP. I have verified that it always appears this way in the packet captures. The delay is After the VIP send TCP https (443) traffic, then there is a 5 second delay. Then the CLIENTHELLO from the VIP (i also agree this is wierd). After that there is an immediate Serverhello. Certificate from the real ip to the vip.

 

Related Content