Bug ID 2257649: Memory leak in confd-key-migrationd when frequently retrieving primary key data

Last Modified: Apr 09, 2026

Affected Product(s):
F5OS F5OS-A(all modules)

Known Affected Versions:
F5OS-A 1.8.3

Opened: Mar 25, 2026

Severity: 3-Major

Symptoms

The confd-key-migrationd process experiences a slow memory leak.

Impact

The resident size of the confd-key-migrationd process increases slowly over time, and may eventually exhaust system memory, resulting in OOM killer and system instability (typically after months of uptime).

Conditions

- primary-key state is frequently retrieved via 'show system aaa' or 'show system aaa primary-key state'. - Equivalent API endpoints such as '/restconf/data/openconfig-system:system/aaa' can also trigger the leak.

Workaround

Observe the resident size (RSS) of the confd-key-migrationd process with the following command: ps -o pid,vsz,rss,cmd -p $(pidof confd-key-migrationd) It is typically no more than ~20MB on a healthy system. Reboot the system or restart the confd-key-migration-mgr docker container to free up the memory, if needed: docker container restart confd-key-migration-mgr

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips