Bug ID 1167969: In DoS Profile level, the Flood attack Vectors with TCP and UDP, Hardware offloading is not working as expected

Last Modified: Apr 26, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4, 17.0.0.2, 17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3

Opened: Oct 07, 2022

Severity: 3-Major

Symptoms

In Multiblade platforms which support high number of TMM threads, bigger per HSB rate limit values are received and it is causing the hardware to not trigger offload, even though the attack traffic matching the configured rate limits.

Impact

Hardware offload for the Flood attack vectors will not trigger as expected.

Conditions

This occurs only in the platforms which supports high number of TMMs (more than 20).

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips