ADC

Support for Intel Coleto SSL chip based platforms

February 17, 2023

Contributed by:

S S L

The following appliances ship with Intel Coleto chips:

MPX 5900
MPX/SDX 8900
MPX/SDX 15000
MPX/SDX 15000-50G
MPX/SDX 26000
MPX/SDX 26000-50S
MPX/SDX 26000-100G

Use the ‘show hardware’ command to identify whether your appliance has Coleto (COL) chips.

> sh hardware

    Platform: NSMPX-8900 8*CPU+4*F1X+6*E1K+1*E1K+1*COL 8955 30010
    Manufactured on: 10/18/2016
    CPU: 2100MHZ
    Host Id: 0
    Serial no: CRAC5CR8UA
    Encoded serial no: CRAC5CR8UA
 Done
<!--NeedCopy-->

Note: Secure renegotiation is supported on the back end for these platforms.

Limitations:

DH 512 cipher is not supported.
SSLv3 protocol is not supported.
Hardware security module (HSM) is not supported.
GnuTLS is not supported.
ECDSA certificates with ECC curves P_224 and P521 are not supported (Not supported on platforms with Cavium chips also.)
DNSSEC offload is not supported.

View the SSL chip utilization on Citrix ADC MPX platforms

From release 13.0 build 47.x, you can view the SSL chip utilization on MPX platforms that ship with Intel Coleto chips. This feature is not supported on the SDX platform and on an MPX cluster.

At the command prompt, type:

> stat ssl

SSL Summary

# SSL cards present                                4

# SSL cards UP                                     4

SSL engine status                                  1

SSL sessions (Rate)                              0

SSL Crypto Utilization Asym (%)                    67

SSL Crypto Utilization Symm (%)                    19
<!--NeedCopy-->

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Support for Intel Coleto SSL chip based platforms

February 17, 2023

Contributed by:

S S L

February 17, 2023

Contributed by:

S S L

Support for Intel Coleto SSL chip based platforms

View the SSL chip utilization on Citrix ADC MPX platforms

In this article