Last Modified: Feb 13, 2019
See more info
Known Affected Versions:
11.2.1, 11.3.0, 11.4.0, 11.4.1, 11.5.0
11.6.0, 11.5.1, 11.5.0 HF1, 11.4.1 HF4, 11.3.0 HF9, 11.2.1 HF11
Opened: Feb 12, 2014
Related AskF5 Article: K16415
When an internal HSM begins to fail, TMM which is performing DNSSEC signing will queue up many RRSIG requests. However, the memory for those requests will not be released because the HSM will never call back. This leads to memory exhaustion in TMM which triggers many other failures and perhaps a crash.
TMM crash and device failover.
Failing HSM, DNSSEC signing of responses.
This issue has no workaround.
A crash bug related to HSM and memory exhaustion has been fixed.