Bug ID 448717: AVR DB grows to a huge size and fills up the /var and /var/lib/mysql partitions

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP ASM, AVR(all modules)

Known Affected Versions:
11.4.0, 11.4.1, 11.5.0

Fixed In:
11.6.0, 11.5.1, 11.5.0 HF1, 11.4.1 HF4, 11.4.0 HF6

Opened: Feb 12, 2014

Severity: 2-Critical

Symptoms

AVR DB grows to a huge size and fills up the /var and /var/lib/mysql partitions.

Impact

Machine will go to offline status.

Conditions

Conditions leading to this issue include having a DoS profile with application DoS enabled on a virtual server that does not have an analytics profile with URL collection attached to it.

Workaround

1. Provision AVR in addition to ASM (tmos)# modify sys provision avr level nominal 2. Turn on URL collection in an analytics profile and attach this profile to each virtual server that has a DoS application profile attached to it. 3. After 2 hours (aggregation/deletion of URL stats) the AVR_DIM_URL table size should be greatly reduced by running the following MySQL command from within the AVR DB: OPTIMIZE TABLE AVR_DIM_URL

Fix Information

The AVR_DIM_URL table size is now controlled and does not fill the /var/lib/mysql partition nor block /var/avr/loader files from being loaded.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips