Forum Discussion

amolari's avatar
amolari
Icon for Cirrus rankCirrus
Dec 24, 2014

Viprion Host-Guest SSL issues

Hi

wondering if anyone else is experiencing issues with Viprion guests loosing access to Host's SSL resource (in v11.4.1 and v11.5.1) and seeing such messages in logs

notice wlite OCTEON consumer is requesting version 2 (P:2, C:2)
notice wlite OCTEON (c|v): Registration tx success for vcmp-shm
notice cn0 (vcmp-0x84-tmm0): wlite provider not responding - consumer cancelling pending reqs and unregistering
notice wlite NITROX (c|v): Registration tx success for vcmp-shm

crit tmm[10422]: 01010025:2: Device error: crypto codec cn-crypto-0 queue is stuck.

We experience that when the CRLs (we have client cert auth) are updated.

Alex

APM
deployment
security
TMOS

3 Replies

Sort By
  • James_Thomson's avatar
    James_Thomson
    Icon for Employee rankEmployee
    Dec 25, 2014

    Did you reach out to the support group by chance? It looks like an issue with the guest requesting resources from the host like you mention. I wonder if part of your configuration may be causing it like the CRL update get's it out of sync.

     

  • Jim_43841's avatar
    Jim_43841
    Historic F5 Account
    Dec 26, 2014

    This is a case of the guest taking a "long time" to service the wlite device and causing the host to consider it dead, forcibly unregistering it. When the guest detects that situation it recovers, as you see. Is the concern about the log messages, or is SSL traffic actually being interrupted for more than a few seconds when updating that configuration item?

     

  • amolari's avatar
    amolari
    Icon for Cirrus rankCirrus
    Jan 12, 2015
    after installing HF7, we do not see anymore that error message