Bug ID 500452: PB4300 blade doesn't disaggregate ESP traffic based on IP addresses in hardware

Last Modified: Oct 07, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2

Fixed In:
13.0.0, 12.1.2 HF1, 12.0.0, 11.5.4 HF3

Opened: Jan 10, 2015

Severity: 4-Minor

Related Article: K28520025

Symptoms

PB4300 blade tries to disaggregate the ESP traffic based on the IPsec ESP Security Parameter Index (SPI) value in hardware. But the blade used doesn't have that capability, which causes ESP traffic being sent to one HSB and results in throughput degradation.

Impact

Throughput degradation.

Conditions

When PB4300 receives ESP traffic.

Workaround

None.

Fix Information

The PB4300 blade now uses IP addresses to disaggregate ESP traffic in hardware, so throughput is no longer impacted.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips