Forum Discussion

jmetertea_34465's avatar
jmetertea_34465
Icon for Nimbostratus rankNimbostratus
Dec 21, 2017

handshake_failure errors during load test

I'm using BIG-IP 11.5.1 and using TLSv1.2.

I'm testing load on our servers using JMeter GUI,

When I submit from windows machine more than 150 threads using JMeter to specific domain I get handshake_failure errors as 

javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

and Connection reset:

java.net.SocketException: Connection reset

I can submit request using specific cipher suite(s), Is there a specific cipher suite(s) to send with the request that will prevent/reduce such errors? Is there a different configuration I should change/look into?

application delivery
BIG-IP
devops

18 Replies

Sort By
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Dec 23, 2017

    I can submit request using specific cipher suite(s), Is there a specific cipher suite(s) to send with the request that will prevent/reduce such errors?

     

    if i were you, i would try with a few hardware accelerated ciphers to see if there is any difference.

     

    K13213: SSL algorithms that are hardware accelerated (11.x - 12.x)

     

    https://support.f5.com/csp/article/K13213

     

    • jmetertea_34465's avatar
      jmetertea_34465
      Icon for Nimbostratus rankNimbostratus
      Dec 25, 2017

      We tried changing web acceleration profiles but still got same issue, is there a specific settings that can help?

       

    • nitass's avatar
      nitass
      Icon for Employee rankEmployee
      Dec 25, 2017

      how come it became web acceleration? i thought you were getting ssl handshake failure.

       

    • jmetertea_34465's avatar
      jmetertea_34465
      Icon for Nimbostratus rankNimbostratus
      Dec 25, 2017

      My mistake, About the link you posted, my platform is Z100 not found in link, can you advice or which SSL algorithms is relevant to Z100 platform?

       

  • nitass_89166's avatar
    nitass_89166
    Icon for Noctilucent rankNoctilucent
    Dec 23, 2017

    I can submit request using specific cipher suite(s), Is there a specific cipher suite(s) to send with the request that will prevent/reduce such errors?

     

    if i were you, i would try with a few hardware accelerated ciphers to see if there is any difference.

     

    K13213: SSL algorithms that are hardware accelerated (11.x - 12.x)

     

    https://support.f5.com/csp/article/K13213

     

    • jmetertea_34465's avatar
      jmetertea_34465
      Icon for Nimbostratus rankNimbostratus
      Dec 25, 2017

      We tried changing web acceleration profiles but still got same issue, is there a specific settings that can help?

       

    • nitass_89166's avatar
      nitass_89166
      Icon for Noctilucent rankNoctilucent
      Dec 25, 2017

      how come it became web acceleration? i thought you were getting ssl handshake failure.

       

    • jmetertea_34465's avatar
      jmetertea_34465
      Icon for Nimbostratus rankNimbostratus
      Dec 25, 2017

      My mistake, About the link you posted, my platform is Z100 not found in link, can you advice or which SSL algorithms is relevant to Z100 platform?