Bug ID 460514: ASM auto-sync device group causes device to run out of memory under stress

Last Modified: Nov 07, 2022

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4

Fixed In:
11.6.0, 11.5.1 HF5

Opened: May 04, 2014

Severity: 2-Critical

Symptoms

ASM auto-sync device group causes device to run out of memory under stress. The device will have many (possibly hundreds) of asm_config_server_rpc_handler_async.pl proccesses running. The following message can be seen in the ts_debug.log: -------------------------- asm|INFO|Apr 22 11:43:33.832|26812|,,Use of uninitialized value in division (/) at /usr/lib/perl5/site_perl/F5/ASMConfig/Handler/SyncHandler.pm line 346.

Impact

Frequent changes on the primary (due to a scan and policy builder) overload the synchronization channel, and it falls so far behind that it can not catch up.

Conditions

When ASM auto-sync device group frequently changes on the primary (due to a scan and policy builder).

Workaround

Stop asm_config_server.pl or restart the device.

Fix Information

To prevent the system from running out of memory, the system requests a configuration sync 5 minutes after a failed one, and not sooner.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips