How to enable ECDHE optimization/ hybrid model to improve cipher performance

How to enable ECDHE optimization/ hybrid model to improve cipher performance

book

Article ID: CTX233574

calendar_today

Updated On:

Description

Command/ steps to enable ECDHE optimization or hybrid model


Instructions

Previously, ECDHE computations were performed only on the hardware.
To improve performance, this hybrid model can be implemented, where, the SSL processing is first performed in the software, upto the configured software crypto threshold.
After this threshold is reached, the operations are offloaded to the hardware


On the CLI, this can be enabled using the following command:
>set ssl parameter -softwareCryptoThreshold <positive_integer>

softwareCryptoThreshold: NetScaler CPU utilization threshold (as a percentage) beyond which crypto operations are not done in software. A value of zero implies that CPU is not utilized for doing crypto in software.
Default = 0, Min = 0, Max = 100


To enable the hybrid model by using the NetScaler GUI:
-Navigate to Traffic Management > SSL > Change advanced SSL settings.
-Enter a value for Software Crypto Threshold (%).