Bug ID 1497665: Certain urldb glob-match patterns are now slower to match

Last Modified: Oct 05, 2024

Affected Product(s):
BIG-IP SWG(all modules)

Known Affected Versions:
17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4

Opened: Jan 30, 2024

Severity: 3-Major

Symptoms

The BIG-IP system has CPU usage and fewer supported open connections.

Impact

BIG-IP cannot support as many connections as it should be able to.

Conditions

- Thousands of glob-match patterns in the url-db. - iRule that uses the CATEGORY::lookup command. - Patterns are of the following forms: \*://blah.com \*://blah.com/ \*://blah.foo.com/\* \*://\*.bar.com

Workaround

Use patterns like this: http\*://blah.com http\*://blah.com/ http\*://blah.foo.com/\* http\*://\*.bar.com

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips