Bug ID 441058: TMM can crash when a large number of SSL objects are created

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.4.1, 11.5.1, 11.5.2, 11.5.3, 11.6.0, 12.0.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0, 12.0.0 HF1, 11.6.1, 11.5.4

Opened: Dec 17, 2013

Severity: 3-Major

Related Article: K17366

Symptoms

Administrative operations which trigger a full reload of SSL cert, key, or CRL files can cause TMM to abort. TMM will miss its heartbeat, at which time it will be killed by sod daemon via SIGABRT.

Impact

Traffic disrupted while tmm restarts.

Conditions

Configuration contains a large number of SSL certs, keys and/or CRLs.

Workaround

Remove any unused SSL objects from configuration.

Fix Information

The system now loads the virtual IP addresses and associated SSL Certs/Keys in batches, so that TMM config load no longer exceeds its allowed CPU time.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips