Bug ID 489259: [AFM] packets from good ip's are being dropped by DoS Sweep & Flood logic

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
11.6.2 HF1, 11.6.0, 11.6.1, 11.6.2, 11.6.3,,,,, 11.6.4, 11.6.5,,,, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.5.2 HF1

Opened: Nov 07, 2014

Severity: 2-Critical


Rate tracker library is not accurate.


Traffic from good IP addresses could end up being dropped.


When traffic is at very low rate.



Fix Information

AFM no longer drops packets from good IP addresses during sweep and flood.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips