Bug ID 1076401: Memory leak in TMM (ldns) when exceeding dnssec.maxnsec3persec.

Last Modified: Feb 07, 2024

Affected Product(s):
BIG-IP DNS, GTM, LTM(all modules)

Known Affected Versions:
13.1.4.1, 13.1.5, 13.1.5.1

Fixed In:
17.0.0, 16.1.2.2, 15.1.6.1, 14.1.5

Opened: Jan 27, 2022

Severity: 3-Major

Symptoms

Memory leak leading to TMM running out of free memory.

Impact

TMM runs out of memory.

Conditions

-- Dnssec.maxnsec3persec set to non-default value (default 0 - unlimited). -- Number of DNS requests leading to NSEC3 responses goes above the limit of dnssec.maxnsec3persec.

Workaround

Set dnssec.maxnsec3persec to 0.

Fix Information

N/A

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips