Bug ID 1211021: Enforcement does not happen for entries in new and modified IPI feed lists due to lock issues

Last Modified: Mar 30, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Fixed In:
17.1.0, 16.1.4, 15.1.10

Opened: Dec 19, 2022

Severity: 4-Minor

Symptoms

Entries added or updated in IP Intelligence (IPI) feed lists are not enforced. This occurs when threads in Dynamic White or Black Daemon (DWBLD) module are in deadlock.

Impact

Enforcement of entries in new and updated IPI feed lists does not happen.

Conditions

- IPI license is enabled. - Feed lists and policies are configured.

Workaround

Run the command "bigstart restart dwbld" to resolve the issue. Check for "Empty items" message in /var/log/dwbld.log. If same message is seen for more than 100 times continuously, threads are in lock state and we can recover by restarting DWBLD module.

Fix Information

The function "set_curl_state" was returning without unlocking mutex in a condition. The mutex is now unlocked appropriately and prevents locking up of DWBLD threads.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips