NetScaler 59XX or 89XX Stops Processing SSL Traffic

NetScaler 59XX or 89XX Stops Processing SSL Traffic

book

Article ID: CTX239212

calendar_today

Updated On:

Description

On MPX 59XX or 89XX all SSL related functions suddenly stops working.
All backend SSL connections failed and all SSL vServers will not accept traffic, including HTTPS connections to the management interface.

For SDX 89XX this occurs for all running VPX instances, but not the SVM.

During this time, the SSL Transactions (ssl_tot_sslInfo_TotalTxCount) may drop to 0


To resolve this, a reboot of the full appliance is required.
In the event of a HA deployment, you can failover and reboot the affected appliance, while it is Secondary

Resolution

This issue has been fixed in 11.1 59.10 onward, 12.0 59.8 onward and all GA releases of 12.1:
The symmetric operations fail because the SSL card becomes unresponsive. [# 708375, 709406, 708978, 708923, 711264, 711404, 712257]
https://docs.citrix.com/en-us/netscaler/11-1/downloads/release-notes-11-1-59-10.html

Problem Cause

A known issue with how the NetScaler 59XX and 89XX platforms are handling failures for the Coleto chips that these new appliances use.