ltm profile client-ssl CLIENTSSL-CUSTOM {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert default.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        default {
            app-service none
            cert default.crt
            chain none
            key default.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain none
    ciphers RSA+AES-GCM:RSA+AES+SHA256:RSA+AES:!SSLv3
    client-cert-ca none
    crl-file none
    defaults-from PARENT-SSL-PROFILE-SECURE2
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain true
    key default.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments no-sslv2 no-sslv3 }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl Ce {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert default.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        default {
            app-service none
            cert default.crt
            chain none
            key default.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain none
    ciphers !SSLv2:ALL:!DH:!ADH:!EDH:@SPEED
    client-cert-ca none
    crl-file none
    defaults-from clientssl
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain true
    key default.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl Ce2 {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert default.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        default {
            app-service none
            cert default.crt
            chain none
            key default.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain none
    ciphers ALL:!DH:!ADH:!EDH:!SSLv3:!SSLv2:@STRENGTH
    client-cert-ca none
    crl-file none
    defaults-from clientssl
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain true
    key default.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl ECCTEST {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert new-star.bader.mod.uk-crt19.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        ecctest_ecctest {
            app-service none
            cert ecctest.crt
            chain ecctest.crt
            key ecctest.key
            ocsp-stapling-params none
            passphrase none
        }
        new-star.bader.mod.uk-key19_new-star.bader.mod.uk-crt19-CA {
            app-service none
            cert new-star.bader.mod.uk-crt19.crt
            chain new-star.bader.mod.uk-crt19-CA.crt
            key new-star.bader.mod.uk-key19.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain new-star.bader.mod.uk-crt19-CA.crt
    ciphers ECDHE_ECDSA+TLSv1_2:ECDHE+HIGH:!3DES:!TLSv1:!TLSv1_1
    client-cert-ca none
    crl-file none
    defaults-from clientssl
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain false
    key new-star.bader.mod.uk-key19.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl PARENT-SSL-PROFILE-SECURE2 {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert default.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        default {
            app-service none
            cert default.crt
            chain none
            key default.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain none
    ciphers ECDHE+AES-GCM:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE+AES:RSA+AES-GCM:RSA+AES+SHA256:RSA+AES:!DES:!3DES:!SSLv3
    client-cert-ca none
    crl-file none
    defaults-from clientssl
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain true
    key default.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments no-sslv2 no-sslv3 }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl RS-matt7338 {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert nglab.rackspace.corp-cert22.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        nglab.rackspace.corp-22 {
            app-service none
            cert nglab.rackspace.corp-cert22.crt
            chain Rackspace_Internal_Root_CA.crt
            key nglab.rackspace.corp-key22.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain Rackspace_Internal_Root_CA.crt
    ciphers RSA+AES-GCM:RSA+AES+SHA256:RSA+AES:!SSLv3
    client-cert-ca none
    crl-file none
    defaults-from CLIENTSSL-CUSTOM
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain false
    key nglab.rackspace.corp-key22.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments no-sslv2 no-sslv3 }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl TEST {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert default.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        default {
            app-service none
            cert default.crt
            chain none
            key default.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain none
    ciphers ECDHE+HIGH:!3DES
    client-cert-ca none
    crl-file none
    defaults-from clientssl
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain true
    key default.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl expired.com-pro18 {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert expired.com-crt18.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        expired.com-pro18-chain {
            app-service none
            cert expired.com-crt18.crt
            chain none
            key expired.com-key18.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain none
    ciphers ECDHE+HIGH:!3DES
    client-cert-ca none
    crl-file none
    defaults-from clientssl
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain false
    key expired.com-key18.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl krzys {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert default.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        default {
            app-service none
            cert default.crt
            chain none
            key default.key
            ocsp-stapling-params none
            passphrase none
        }
        krzys.com {
            app-service none
            cert krzys.com.crt
            chain none
            key krzys.com.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain none
    ciphers ECDHE+HIGH:!3DES
    client-cert-ca none
    crl-file none
    defaults-from clientssl
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain false
    key default.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl nglab.rackspace.corp-pro22 {
    alert-timeout 10
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl enabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert default.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        default_ca-bundle {
            app-service none
            cert default.crt
            chain ca-bundle.crt
            key default.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain ca-bundle.crt
    ciphers DEFAULT
    client-cert-ca none
    crl-file none
    defaults-from clientssl
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain false
    key default.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl nglab.rackspace.corp-pro22-SNI {
    alert-timeout 10
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert default.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        default_Rackspace_Internal_Root_CA {
            app-service none
            cert default.crt
            chain Rackspace_Internal_Root_CA.crt
            key default.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain Rackspace_Internal_Root_CA.crt
    ciphers DEFAULT
    client-cert-ca none
    crl-file none
    defaults-from clientssl
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain false
    key default.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name testing.com
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl nglab.rackspace.corp-pro23 {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert nglab.rackspace.corp-cert22.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        nglab.rackspace.corp-key22_Rackspace_Internal_Root_CA {
            app-service none
            cert nglab.rackspace.corp-cert22.crt
            chain Rackspace_Internal_Root_CA.crt
            key nglab.rackspace.corp-key22.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain Rackspace_Internal_Root_CA.crt
    ciphers RSA+AES-GCM:RSA+AES+SHA256:RSA+AES:!SSLv3
    client-cert-ca none
    crl-file none
    defaults-from CLIENTSSL-CUSTOM
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain false
    key nglab.rackspace.corp-key22.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments no-sslv2 no-sslv3 }
    partition Common
    passphrase none
    peer-cert-mode request
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl ssl3des {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert default.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        default {
            app-service none
            cert default.crt
            chain none
            key default.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain none
    ciphers DES-CBC3-SHA
    client-cert-ca none
    crl-file none
    defaults-from clientssl
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain true
    key default.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl wild_bcash_com_v2 {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl disabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert default.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        default {
            app-service none
            cert default.crt
            chain none
            key default.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain none
    ciphers ECDHE+HIGH:!3DES
    client-cert-ca none
    crl-file none
    defaults-from clientssl
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain false
    key default.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile client-ssl wom-default-clientssl {
    alert-timeout indefinite
    allow-dynamic-record-sizing disabled
    allow-expired-crl disabled
    allow-non-ssl enabled
    app-service none
    authenticate once
    authenticate-depth 9
    ca-file none
    cache-size 262144
    cache-timeout 3600
    cert default.crt
    cert-extension-includes { basic-constraints subject-alternative-name }
    cert-key-chain {
        default {
            app-service none
            cert default.crt
            chain none
            key default.key
            ocsp-stapling-params none
            passphrase none
        }
    }
    cert-lifespan 30
    cert-lookup-by-ipaddr-port disabled
    chain none
    ciphers ECDHE+HIGH:!3DES
    client-cert-ca none
    crl-file none
    defaults-from clientssl
    description none
    destination-ip-blacklist none
    destination-ip-whitelist none
    forward-proxy-bypass-default-action intercept
    generic-alert enabled
    handshake-timeout 10
    hostname-blacklist none
    hostname-whitelist none
    inherit-certkeychain false
    key default.key
    max-active-handshakes indefinite
    max-aggregate-renegotiation-per-minute indefinite
    max-renegotiations-per-minute 5
    maximum-record-size 16384
    mod-ssl-methods disabled
    mode enabled
    options { dont-insert-empty-fragments }
    partition Common
    passphrase none
    peer-cert-mode ignore
    peer-no-renegotiate-timeout 10
    proxy-ca-cert none
    proxy-ca-key none
    proxy-ca-passphrase none
    proxy-ssl disabled
    proxy-ssl-passthrough disabled
    renegotiate-max-record-delay indefinite
    renegotiate-period indefinite
    renegotiate-size indefinite
    renegotiation enabled
    retain-certificate true
    secure-renegotiation require
    server-name none
    session-mirroring disabled
    session-ticket disabled
    session-ticket-timeout 0
    sni-default false
    sni-require false
    source-ip-blacklist none
    source-ip-whitelist none
    ssl-forward-proxy disabled
    ssl-forward-proxy-bypass disabled
    ssl-sign-hash any
    strict-resume disabled
    unclean-shutdown enabled
}
ltm profile fastl4 PROF-FASTL4-FORWARDING {
    app-service none
    client-timeout 30
    defaults-from fastL4
    description none
    explicit-flow-migration disabled
    hardware-syn-cookie enabled
    idle-timeout 3600
    ip-df-mode preserve
    ip-tos-to-client pass-through
    ip-tos-to-server pass-through
    ip-ttl-mode decrement
    ip-ttl-v4 255
    ip-ttl-v6 64
    keep-alive-interval disabled
    late-binding disabled
    link-qos-to-client pass-through
    link-qos-to-server pass-through
    loose-close disabled
    loose-initialization disabled
    mss-override 0
    partition Common
    priority-to-client pass-through
    priority-to-server pass-through
    pva-acceleration full
    pva-dynamic-client-packets 1
    pva-dynamic-server-packets 0
    pva-flow-aging enabled
    pva-flow-evict enabled
    pva-offload-dynamic enabled
    pva-offload-state embryonic
    reassemble-fragments disabled
    receive-window-size 0
    reset-on-timeout enabled
    rtt-from-client disabled
    rtt-from-server disabled
    server-sack disabled
    server-timestamp disabled
    software-syn-cookie disabled
    syn-cookie-whitelist disabled
    tcp-close-timeout 5
    tcp-generate-isn disabled
    tcp-handshake-timeout 5
    tcp-strip-sack disabled
    tcp-timestamp-mode preserve
    tcp-wscale-mode preserve
    timeout-recovery disconnect
}
ltm profile fastl4 PROF-FASTL4-FORWARDING-UDP {
    app-service none
    client-timeout 30
    defaults-from fastL4
    description none
    explicit-flow-migration disabled
    hardware-syn-cookie enabled
    idle-timeout 120
    ip-df-mode preserve
    ip-tos-to-client pass-through
    ip-tos-to-server pass-through
    ip-ttl-mode decrement
    ip-ttl-v4 255
    ip-ttl-v6 64
    keep-alive-interval disabled
    late-binding disabled
    link-qos-to-client pass-through
    link-qos-to-server pass-through
    loose-close disabled
    loose-initialization disabled
    mss-override 0
    partition Common
    priority-to-client pass-through
    priority-to-server pass-through
    pva-acceleration full
    pva-dynamic-client-packets 1
    pva-dynamic-server-packets 0
    pva-flow-aging enabled
    pva-flow-evict enabled
    pva-offload-dynamic enabled
    pva-offload-state embryonic
    reassemble-fragments disabled
    receive-window-size 0
    reset-on-timeout enabled
    rtt-from-client disabled
    rtt-from-server disabled
    server-sack disabled
    server-timestamp disabled
    software-syn-cookie disabled
    syn-cookie-whitelist disabled
    tcp-close-timeout 5
    tcp-generate-isn disabled
    tcp-handshake-timeout 5
    tcp-strip-sack disabled
    tcp-timestamp-mode preserve
    tcp-wscale-mode preserve
    timeout-recovery disconnect
}
ltm profile http HTTP-PROFILE {
    accept-xff disabled
    app-service none
    basic-auth-realm none
    defaults-from http
    description none
    encrypt-cookie-secret none
    encrypt-cookies none
    enforcement {
        excess-client-headers reject
        excess-server-headers reject
        known-methods { CONNECT DELETE GET HEAD LOCK OPTIONS POST PROPFIND PUT TRACE UNLOCK }
        max-header-count 64
        max-header-size 32768
        max-requests 0
        oversize-client-headers reject
        oversize-server-headers reject
        pipeline allow
        truncated-redirects disabled
        unknown-method allow
    }
    explicit-proxy {
        bad-request-message none
        bad-response-message none
        connect-error-message none
        default-connect-handling deny
        dns-error-message none
        dns-resolver none
        host-names none
        route-domain none
        tunnel-name none
    }
    fallback-host none
    fallback-status-codes none
    header-erase none
    header-insert X-Forwarded-Proto:http
    hsts {
        include-subdomains enabled
        maximum-age 16070400
        mode disabled
    }
    insert-xforwarded-for enabled
    lws-separator none
    lws-width 80
    oneconnect-transformations enabled
    partition Common
    proxy-type reverse
    redirect-rewrite none
    request-chunking preserve
    response-chunking selective
    response-headers-permitted none
    server-agent-name BigIP
    sflow {
        poll-interval 0
        poll-interval-global yes
        sampling-rate 0
        sampling-rate-global yes
    }
    via-host-name none
    via-request preserve
    via-response preserve
    xff-alternative-names none
}
ltm profile http HTTP-XFF {
    accept-xff disabled
    app-service none
    basic-auth-realm none
    defaults-from http
    description none
    encrypt-cookie-secret none
    encrypt-cookies none
    enforcement {
        excess-client-headers reject
        excess-server-headers reject
        known-methods { CONNECT DELETE GET HEAD LOCK OPTIONS POST PROPFIND PUT TRACE UNLOCK }
        max-header-count 64
        max-header-size 32768
        max-requests 0
        oversize-client-headers reject
        oversize-server-headers reject
        pipeline allow
        truncated-redirects disabled
        unknown-method allow
    }
    explicit-proxy {
        bad-request-message none
        bad-response-message none
        connect-error-message none
        default-connect-handling deny
        dns-error-message none
        dns-resolver none
        host-names none
        route-domain none
        tunnel-name none
    }
    fallback-host none
    fallback-status-codes none
    header-erase none
    header-insert none
    hsts {
        include-subdomains enabled
        maximum-age 16070400
        mode disabled
    }
    insert-xforwarded-for enabled
    lws-separator none
    lws-width 80
    oneconnect-transformations enabled
    partition Common
    proxy-type reverse
    redirect-rewrite none
    request-chunking preserve
    response-chunking selective
    response-headers-permitted none
    server-agent-name BigIP
    sflow {
        poll-interval 0
        poll-interval-global yes
        sampling-rate 0
        sampling-rate-global yes
    }
    via-host-name none
    via-request preserve
    via-response preserve
    xff-alternative-names none
}
ltm profile http HTTPS-PROFILE {
    accept-xff disabled
    app-service none
    basic-auth-realm none
    defaults-from http
    description none
    encrypt-cookie-secret none
    encrypt-cookies none
    enforcement {
        excess-client-headers reject
        excess-server-headers reject
        known-methods { CONNECT DELETE GET HEAD LOCK OPTIONS POST PROPFIND PUT TRACE UNLOCK }
        max-header-count 64
        max-header-size 32768
        max-requests 0
        oversize-client-headers reject
        oversize-server-headers reject
        pipeline allow
        truncated-redirects disabled
        unknown-method allow
    }
    explicit-proxy {
        bad-request-message none
        bad-response-message none
        connect-error-message none
        default-connect-handling deny
        dns-error-message none
        dns-resolver none
        host-names none
        route-domain none
        tunnel-name none
    }
    fallback-host none
    fallback-status-codes none
    header-erase none
    header-insert X-Forwarded-Proto:https
    hsts {
        include-subdomains enabled
        maximum-age 16070400
        mode disabled
    }
    insert-xforwarded-for enabled
    lws-separator none
    lws-width 80
    oneconnect-transformations enabled
    partition Common
    proxy-type reverse
    redirect-rewrite none
    request-chunking preserve
    response-chunking selective
    response-headers-permitted none
    server-agent-name BigIP
    sflow {
        poll-interval 0
        poll-interval-global yes
        sampling-rate 0
        sampling-rate-global yes
    }
    via-host-name none
    via-request preserve
    via-response preserve
    xff-alternative-names none
}
ltm profile http PROF-HTTP-X-FORWARDED-PROTO {
    accept-xff disabled
    app-service none
    basic-auth-realm none
    defaults-from http
    description none
    encrypt-cookie-secret none
    encrypt-cookies none
    enforcement {
        excess-client-headers reject
        excess-server-headers reject
        known-methods { CONNECT DELETE GET HEAD LOCK OPTIONS POST PROPFIND PUT TRACE UNLOCK }
        max-header-count 64
        max-header-size 32768
        max-requests 0
        oversize-client-headers reject
        oversize-server-headers reject
        pipeline allow
        truncated-redirects disabled
        unknown-method allow
    }
    explicit-proxy {
        bad-request-message none
        bad-response-message none
        connect-error-message none
        default-connect-handling deny
        dns-error-message none
        dns-resolver none
        host-names none
        route-domain none
        tunnel-name none
    }
    fallback-host none
    fallback-status-codes none
    header-erase none
    header-insert X-Forwarded-Proto:https
    hsts {
        include-subdomains enabled
        maximum-age 16070400
        mode disabled
    }
    insert-xforwarded-for enabled
    lws-separator none
    lws-width 80
    oneconnect-transformations enabled
    partition Common
    proxy-type reverse
    redirect-rewrite none
    request-chunking preserve
    response-chunking selective
    response-headers-permitted none
    server-agent-name BigIP
    sflow {
        poll-interval 0
        poll-interval-global yes
        sampling-rate 0
        sampling-rate-global yes
    }
    via-host-name none
    via-request preserve
    via-response preserve
    xff-alternative-names none
}
ltm profile http XFF {
    accept-xff disabled
    app-service none
    basic-auth-realm none
    defaults-from http
    description none
    encrypt-cookie-secret none
    encrypt-cookies none
    enforcement {
        excess-client-headers reject
        excess-server-headers reject
        known-methods { CONNECT DELETE GET HEAD LOCK OPTIONS POST PROPFIND PUT TRACE UNLOCK }
        max-header-count 64
        max-header-size 32768
        max-requests 0
        oversize-client-headers reject
        oversize-server-headers reject
        pipeline allow
        truncated-redirects disabled
        unknown-method allow
    }
    explicit-proxy {
        bad-request-message none
        bad-response-message none
        connect-error-message none
        default-connect-handling deny
        dns-error-message none
        dns-resolver none
        host-names none
        route-domain none
        tunnel-name none
    }
    fallback-host none
    fallback-status-codes none
    header-erase none
    header-insert none
    hsts {
        include-subdomains enabled
        maximum-age 16070400
        mode disabled
    }
    insert-xforwarded-for enabled
    lws-separator none
    lws-width 80
    oneconnect-transformations enabled
    partition Common
    proxy-type reverse
    redirect-rewrite none
    request-chunking preserve
    response-chunking selective
    response-headers-permitted none
    server-agent-name BigIP
    sflow {
        poll-interval 0
        poll-interval-global yes
        sampling-rate 0
        sampling-rate-global yes
    }
    via-host-name none
    via-request preserve
    via-response preserve
    xff-alternative-names none
}
ltm profile http XFP {
    accept-xff disabled
    app-service none
    basic-auth-realm none
    defaults-from http
    description none
    encrypt-cookie-secret none
    encrypt-cookies none
    enforcement {
        excess-client-headers reject
        excess-server-headers reject
        known-methods { CONNECT DELETE GET HEAD LOCK OPTIONS POST PROPFIND PUT TRACE UNLOCK }
        max-header-count 64
        max-header-size 32768
        max-requests 0
        oversize-client-headers reject
        oversize-server-headers reject
        pipeline allow
        truncated-redirects disabled
        unknown-method allow
    }
    explicit-proxy {
        bad-request-message none
        bad-response-message none
        connect-error-message none
        default-connect-handling deny
        dns-error-message none
        dns-resolver none
        host-names none
        route-domain none
        tunnel-name none
    }
    fallback-host none
    fallback-status-codes none
    header-erase none
    header-insert "X-Forwarded-Proto: https"
    hsts {
        include-subdomains enabled
        maximum-age 16070400
        mode disabled
    }
    insert-xforwarded-for disabled
    lws-separator none
    lws-width 80
    oneconnect-transformations enabled
    partition Common
    proxy-type reverse
    redirect-rewrite none
    request-chunking preserve
    response-chunking selective
    response-headers-permitted none
    server-agent-name BigIP
    sflow {
        poll-interval 0
        poll-interval-global yes
        sampling-rate 0
        sampling-rate-global yes
    }
    via-host-name none
    via-request preserve
    via-response preserve
    xff-alternative-names none
}
ltm profile one-connect ONE-CONNECT {
    app-service none
    defaults-from oneconnect
    description none
    idle-timeout-override disabled
    limit-type none
    max-age 86400
    max-reuse 1000
    max-size 10000
    partition Common
    share-pools disabled
    source-mask 255.255.255.255
}
ltm profile tcp TCP {
    abc enabled
    ack-on-push enabled
    app-service none
    close-wait-timeout 5
    cmetrics-cache enabled
    cmetrics-cache-timeout 0
    congestion-control high-speed
    defaults-from tcp
    deferred-accept disabled
    delay-window-control disabled
    delayed-acks enabled
    description none
    dsack disabled
    early-retransmit disabled
    ecn disabled
    fast-open disabled
    fast-open-cookie-expiration 21600
    fin-wait-2-timeout 300
    fin-wait-timeout 5
    hardware-syn-cookie enabled
    idle-timeout 2700
    init-cwnd 0
    init-rwnd 0
    ip-df-mode pmtu
    ip-tos-to-client 0
    ip-ttl-mode proxy
    ip-ttl-v4 255
    ip-ttl-v6 64
    keep-alive-interval 1800
    limited-transmit enabled
    link-qos-to-client 0
    max-retrans 8
    max-segment-size 1460
    md5-signature disabled
    md5-signature-passphrase none
    minimum-rto 0
    mptcp disabled
    mptcp-csum disabled
    mptcp-csum-verify disabled
    mptcp-debug disabled
    mptcp-fallback reset
    mptcp-fastjoin disabled
    mptcp-idle-timeout 300
    mptcp-join-max 5
    mptcp-makeafterbreak disabled
    mptcp-nojoindssack disabled
    mptcp-rtomax 5
    mptcp-rxmitmin 1000
    mptcp-subflowmax 6
    mptcp-timeout 3600
    nagle disabled
    partition Common
    pkt-loss-ignore-burst 0
    pkt-loss-ignore-rate 0
    proxy-buffer-high 49152
    proxy-buffer-low 32768
    proxy-mss enabled
    proxy-options enabled
    rate-pace disabled
    rate-pace-max-rate 0
    receive-window-size 65535
    reset-on-timeout enabled
    rexmt-thresh 3
    selective-acks enabled
    selective-nack disabled
    send-buffer-size 65535
    slow-start enabled
    syn-cookie-whitelist disabled
    syn-max-retrans 3
    syn-rto-base 0
    tail-loss-probe disabled
    tcp-options none
    time-wait-recycle enabled
    time-wait-timeout 2000
    timestamps enabled
    verified-accept disabled
    zero-window-timeout 20000
}
ltm profile tcp TCP-MOBILE-1H {
    abc disabled
    ack-on-push enabled
    app-service none
    close-wait-timeout 5
    cmetrics-cache enabled
    cmetrics-cache-timeout 0
    congestion-control high-speed
    defaults-from tcp-mobile-optimized
    deferred-accept disabled
    delay-window-control disabled
    delayed-acks disabled
    description none
    dsack disabled
    early-retransmit disabled
    ecn enabled
    fast-open disabled
    fast-open-cookie-expiration 21600
    fin-wait-2-timeout 300
    fin-wait-timeout 5
    hardware-syn-cookie enabled
    idle-timeout 3600
    init-cwnd 16
    init-rwnd 0
    ip-df-mode pmtu
    ip-tos-to-client 0
    ip-ttl-mode proxy
    ip-ttl-v4 255
    ip-ttl-v6 64
    keep-alive-interval 1800
    limited-transmit enabled
    link-qos-to-client 0
    max-retrans 8
    max-segment-size 1460
    md5-signature disabled
    md5-signature-passphrase none
    minimum-rto 0
    mptcp disabled
    mptcp-csum disabled
    mptcp-csum-verify disabled
    mptcp-debug disabled
    mptcp-fallback reset
    mptcp-fastjoin disabled
    mptcp-idle-timeout 300
    mptcp-join-max 5
    mptcp-makeafterbreak disabled
    mptcp-nojoindssack disabled
    mptcp-rtomax 5
    mptcp-rxmitmin 1000
    mptcp-subflowmax 6
    mptcp-timeout 3600
    nagle enabled
    partition Common
    pkt-loss-ignore-burst 0
    pkt-loss-ignore-rate 0
    proxy-buffer-high 131072
    proxy-buffer-low 131072
    proxy-mss enabled
    proxy-options enabled
    rate-pace disabled
    rate-pace-max-rate 0
    receive-window-size 131072
    reset-on-timeout disabled
    rexmt-thresh 3
    selective-acks enabled
    selective-nack disabled
    send-buffer-size 131072
    slow-start enabled
    syn-cookie-whitelist disabled
    syn-max-retrans 3
    syn-rto-base 0
    tail-loss-probe disabled
    tcp-options none
    time-wait-recycle enabled
    time-wait-timeout 2000
    timestamps enabled
    verified-accept disabled
    zero-window-timeout 20000
}
ltm profile tcp testing {
    abc enabled
    ack-on-push enabled
    app-service none
    close-wait-timeout 5
    cmetrics-cache enabled
    cmetrics-cache-timeout 0
    congestion-control high-speed
    defaults-from tcp
    deferred-accept disabled
    delay-window-control disabled
    delayed-acks enabled
    description none
    dsack disabled
    early-retransmit disabled
    ecn disabled
    fast-open disabled
    fast-open-cookie-expiration 21600
    fin-wait-2-timeout 300
    fin-wait-timeout 5
    hardware-syn-cookie enabled
    idle-timeout 300
    init-cwnd 0
    init-rwnd 0
    ip-df-mode pmtu
    ip-tos-to-client 0
    ip-ttl-mode proxy
    ip-ttl-v4 255
    ip-ttl-v6 64
    keep-alive-interval 1800
    limited-transmit enabled
    link-qos-to-client 0
    max-retrans 8
    max-segment-size 1460
    md5-signature disabled
    md5-signature-passphrase none
    minimum-rto 0
    mptcp disabled
    mptcp-csum disabled
    mptcp-csum-verify disabled
    mptcp-debug disabled
    mptcp-fallback reset
    mptcp-fastjoin disabled
    mptcp-idle-timeout 300
    mptcp-join-max 5
    mptcp-makeafterbreak disabled
    mptcp-nojoindssack disabled
    mptcp-rtomax 5
    mptcp-rxmitmin 1000
    mptcp-subflowmax 6
    mptcp-timeout 3600
    nagle disabled
    partition Common
    pkt-loss-ignore-burst 0
    pkt-loss-ignore-rate 0
    proxy-buffer-high 49152
    proxy-buffer-low 32768
    proxy-mss enabled
    proxy-options enabled
    rate-pace disabled
    rate-pace-max-rate 0
    receive-window-size 65535
    reset-on-timeout enabled
    rexmt-thresh 3
    selective-acks enabled
    selective-nack disabled
    send-buffer-size 65535
    slow-start enabled
    syn-cookie-whitelist disabled
    syn-max-retrans 3
    syn-rto-base 0
    tail-loss-probe disabled
    tcp-options none
    time-wait-recycle enabled
    time-wait-timeout 1
    timestamps enabled
    verified-accept disabled
    zero-window-timeout 20000
}
ltm profile web-acceleration PROFILE-PROD-CACHE-VS-94.236.70.229 {
    app-service none
    applications none
    cache-aging-rate 9
    cache-client-cache-control-mode all
    cache-insert-age-header enabled
    cache-max-age 600
    cache-max-entries 10000
    cache-object-max-size 5000000
    cache-object-min-size 0
    cache-size 200mb
    cache-uri-exclude { "(\?#glob)*.json" }
    cache-uri-include { .* }
    cache-uri-include-override none
    cache-uri-pinned none
    defaults-from optimized-caching
    metadata-cache-max-size 25mb
    partition Common
}
ltm profile web-acceleration PROFILE-TEST-1-CACHE {
    app-service none
    applications none
    cache-aging-rate 9
    cache-client-cache-control-mode all
    cache-insert-age-header enabled
    cache-max-age 600
    cache-max-entries 10000
    cache-object-max-size 5000000
    cache-object-min-size 0
    cache-size 200mb
    cache-uri-exclude { "(\?#glob)*.js" "(\?#glob)*.css" (\?i)(^/cam) (\?i)(^/timetableclassic) (\?i)(^/timetableservice) (\?i)(^/unsubscribeservice) (\?i)(^/scm) (\?i)(^/web-app) ^/$ "(\?#glob)*.json" }
    cache-uri-include { .* }
    cache-uri-include-override none
    cache-uri-pinned none
    defaults-from optimized-caching
    metadata-cache-max-size 25mb
    partition Common
}
ltm profile web-acceleration testmike {
    app-service none
    applications none
    cache-aging-rate 9
    cache-client-cache-control-mode all
    cache-insert-age-header enabled
    cache-max-age 3600
    cache-max-entries 10000
    cache-object-max-size 50000
    cache-object-min-size 500
    cache-size 100mb
    cache-uri-exclude none
    cache-uri-include { .* }
    cache-uri-include-override none
    cache-uri-pinned none
    defaults-from webacceleration
    metadata-cache-max-size 25mb
    partition Common
}

