Bug ID 1211297: Handling DoS profiles created dynamically using iRule and L7Policy

Last Modified: May 15, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Fixed In:
17.1.1, 16.1.4, 15.1.9

Opened: Dec 20, 2022

Severity: 2-Critical

Symptoms

Persistent connections with HTTP requests that may switch according to dynamic change of DoS policy (using iRule or L7Policy) can cause a TMM crash.

Impact

In few scenarios, when DoS policy is changed during connection lifetime, TMM might crash.

Conditions

A request arrives to BIG-IP and is waiting to be served (it is delayed using iRule), however, if the DoS profile is unbound during that time from the virtual server and a dynamic DoS profile change decision is made, it could potentially cause the request to be incorrectly associated with a context that has already been freed.

Workaround

None

Fix Information

No TMM crash due to persistent connections.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips