Last Modified: Apr 28, 2025
Affected Product(s):
BIG-IP AFM
Fixed In:
17.1.0
Opened: Sep 29, 2022 Severity: 2-Critical
AFM supports hardware DoS protection where packet drops can be accelerated by hardware. But hardware offloading does not work on BIG-IP tenants launched from F5OS.
Hardware offloading does not occur. DoS protection is handled by software.
-- BIG-IP tenants in F5OS systems -- AFM DoS is enabled on the BIG-IP tenant. -- Traffic-related vectors are configured.
To enable hardware DoS offload, within the guest/tenant, modify dos.vcmphwdos variable value to true: tmsh modify sys db dos.vcmphwdos value true
In tenant over the VELOS family platform, dos.vcmphwdos will not make any effect and hardware offload can be controlled with the dos.forceswdos variable.