Bug ID 436764: AFM iRule can leak memory

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
11.4.0, 11.4.1

Fixed In:
11.5.0, 11.4.1 HF2, 11.4.0 HF6

Opened: Nov 06, 2013

Severity: 2-Critical

Related Article: K04151340

Symptoms

There is a gradual memory leak in TMM when iRules are triggered with an AFM ACL rule. Eventually, over a period of time, this may cause TMM to start running out of memory and sweeper may start killing existing connections to recover from this.

Impact

Memory leak in TMM eventually leading to memory pressure that may result in TMM dropping existing connections.

Conditions

AFM is enabled and there is at least 1 AFM ACL rule configured with an iRule on it.

Workaround

This issue has no workaround at this time.

Fix Information

Previously when an iRule was triggered by an AFM firewall rule, a memory leak could occur. This has been fixed.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips