Bug ID 1787981: Memory leak in ips_pcb_cache

Last Modified: Jun 03, 2025

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
16.1.0, 16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3, 16.1.5, 16.1.5.1, 16.1.5.2, 17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.5.0

Opened: Jan 22, 2025

Severity: 3-Major

Symptoms

The ips_pcb_cache stat keeps increasing while the system is passing traffic.

Impact

Increased memory usage of ips_pcb_cache and may lead to tmm crash. Traffic disrupted while tmm restarts.

Conditions

- IPS licensed and provisioned. - Port missing from service or - Port configured for service that does not match traffic.

Workaround

Add TCP port (e.g., port 443) to the respective service on the IPS profile. For example, with a virtual-server that is configured with port 443, the port should be added to HTTP service if it terminates SSL (e.g., has client-ssl profile), otherwise the SSL service.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips