Bug ID 480982: pkcs11d with a high thread count can result in high CPU utilization

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP All(all modules)

Known Affected Versions:
11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0

Opened: Sep 24, 2014

Severity: 3-Major

Related Article: K37041313

Symptoms

When pkcs11d is set to use a very high thread count, CPU utilization can increase dramatically.

Impact

Less CPU available for other processes.

Conditions

The thread count for pkcs11d is set higher than the default.

Workaround

Do not set the db variable for pkcs11d thread count (/sys crypto fips external-hsm num-threads) higher than the default.

Fix Information

pkcs11d CPU utilization is far lower even with a high thread count.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips