OOB decryption

Introduced in 2.5

Overview

Out-of-band (OOB) decryption lets the Aviz Service Node (ASN) inspect plaintext payloads from mirrored TLS traffic. It does not affect the original connection.

OOB decryption runs only in DC mode. The appliance selects DC mode at runtime through its mode-control channel. In TELCO mode, this feature does not run, even when its flags are enabled.

Set --tls_decryption false to disable OOB decryption. Other related flags have no effect.