Bug ID 1209409: Address lists with thousands of addresses can cause MCPD to become unresponsive and use 100% CPU

Last Modified: Apr 26, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:,,,,,, 14.1.3,, 14.1.4,,,,,,, 14.1.5,,,,,, 15.1.0,,,,,, 15.1.1, 15.1.2,, 15.1.3,, 15.1.4,, 15.1.5,, 15.1.6,, 15.1.7, 15.1.8,,, 15.1.9,, 15.1.10,,,, 16.1.0, 16.1.1, 16.1.2,,, 16.1.3,,,,,, 17.0.0,,, 17.1.0,,,, 17.1.1,,,

Fixed In:

Opened: Dec 13, 2022

Severity: 3-Major


If there are thousands of addresses in an address list, validation of the addresses can take extended time. While MCPD is validating the addresses it will use nearly 100% of the CPU. Also, during this time, other daemon might timeout their connection with MCPD and/or restart.


- Longer load /sys configuration time including on upgrade. - Longer configuration sync time, where full configuration sync is more prone to cause this issue. - Modifications using the webUI consume longer time and might timeout. Depending on how long MCPD spends validating the addresses, other daemons, including TMM, might timeout their connection to MCPD and/or restart.


- Thousands of addresses in an address list.



Fix Information

The time it takes mcpd to validate an addresses list that contains nested address lists is greatly reduced.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips