Bug ID 1013353: ICMP flood or ICMP/IP/IPv6 fragment vectors are not hardware mitigated when configured on VS

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Opened: Apr 21, 2021

Severity: 1-Blocking

Symptoms

Hardware drops are not seen for the vectors ICMP flood or ICMP/IP/IPv6 fragment.

Impact

Hardware mitigation is not happening when ICMP flood and ICMP/IP/IPv6 fragment vectors are configured on a VS.

Conditions

In the case of a virtual server configured with ICMP flood or ICMP/IP/IPv6 fragment vectors, will see only attack mitigation and drops at the software level.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips