Bug ID 684937: [KERBEROS SSO] Performance of LRU cache for Kerberos tickets drops gradually with the number of users

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.5.4, 11.5.5, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5

Fixed In:
14.0.0, 13.1.0.6, 13.0.1, 12.1.3.6, 11.6.3.2, 11.5.6

Opened: Sep 22, 2017

Severity: 3-Major

Related Article: K26451305

Symptoms

APM performance of handling HTTP request drops gradually when Kerberos SSO is being used over period of time. Websso process CPU usage is very high during this time. The latency can vary between APM end users.

Impact

Increased latency of HTTP request processing.

Conditions

-- A large number of APM end users have logged on and are using Kerberos SSO. -- Running APM.

Workaround

Reduce the number of cached Kerberos user tickets by lowering the cache lifetime.

Fix Information

LRU cache performance no longer drops linearly with the number of caches Kerberos tickets, the latency of HTTP request processing has been significantly improved.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips