Bug ID 2009681: Bad actor rate does not work as expected for NXDOMAIN DoS vector

Last Modified: Aug 06, 2025

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
17.1.2.2

Opened: Aug 05, 2025

Severity: 4-Minor

Symptoms

The Bad Actor (BA) statistics rate (ba_stats_rate) does not accurately reflect the actual traffic rate for NXDOMAIN and other DoS vectors

Impact

Stats are shown incorrectly but AFM does detect when the threshold has been exceeded.

Conditions

The issue occurs during DoS attack simulation NXDOMAIN on AFM with Bad Actor detection enabled

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips