Bug ID 1590517: High CPU utilization when enabling IPS + HTTP/2 Profile

Last Modified: Jan 17, 2025

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1

Opened: May 30, 2024

Severity: 2-Critical

Symptoms

When running HTTP/2 requests with all IPS signatures and compliance checks enabled, 100% TMM CPU utilization peaks occur.

Impact

HTTP/2 traffic slowdown occurs, which impacts performance.

Conditions

-- Virtual server with an IPS and HTTP2 profile -- HTTP2 traffic

Workaround

To help optimize CPU utilization, enable only the necessary IPS signatures and compliance checks based on specific requirements, rather than activating all available options. While this targeted approach reduces the system’s processing load and maintains essential protections, it may not completely eliminate CPU usage spikes under high traffic or intensive processing demands.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips