Bug ID 489259: [AFM] packets from good ip's are being dropped by DoS Sweep & Flood logic

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
11.6.2 HF1, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.5.2 HF1

Opened: Nov 07, 2014

Severity: 2-Critical

Symptoms

Rate tracker library is not accurate.

Impact

Traffic from good IP addresses could end up being dropped.

Conditions

When traffic is at very low rate.

Workaround

None

Fix Information

AFM no longer drops packets from good IP addresses during sweep and flood.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips