Bug ID 428764: Policies become non-functional when the complexity increases a certain point

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP PEM(all modules)

Known Affected Versions:
11.4.0, 11.4.1

Fixed In:
11.5.0, 11.4.1 HF2

Opened: Aug 24, 2013

Severity: 3-Major

Related Article: K14957


An LTM policy can become non-functional when its complexity increases, though there are various factor that determine a policies complexity, the may cause is when it contains many rules that have no overlapping conditions. Conditions overlap when they share the same type of condition on the same operand, e.g. when they both have 'http-host ends-with' or 'http-uri starts-with'.


The policy becomes non-functional.


When the complexity increases, the policy ceases to execute and it appear that no rule ever matches and no action is ever executed.



Fix Information

Improvement to allow more rules and bigger state-machines to ensure CPM functions as designed after policy update.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips