Bug ID 501986: Add a sys db tunable to make Sweep and Flood vectors be rate-limited per-TMM process

Last Modified: Jan 16, 2021

Bug Tracker

Affected Product:  See more info
BIG-IP AFM(all modules)

Known Affected Versions:
11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.10, 11.5.2, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4

Fixed In:
12.0.0, 11.6.0 HF5, 11.5.2 HF1

Opened: Jan 20, 2015
Severity: 3-Major

Symptoms

There is a need for Sweep and Flood vectors to be very accurate (+-5%). To ensure that Sweep and Flood can be very accurate the system needs a mode in which the Sweep and Flood vectors work per-TMM process. In this case the traffic must be very well distributed for it to be effective. BIG-IP systems now has a sys db tunable which is: dos.globalsflimits which is true by default. If the tunable is set to false, then the Sweep and Flood vectors work per-TMM process. The limits that have been configured are divided equally among the various TMM processes, and because the traffic is well-distributed among the TMM processes, the system will get close to the limits specified.

Impact

If the db variable is changed to false, the incoming traffic must be well distributed.

Conditions

When Sweep and Flood vector is enabled in AFM module.

Workaround

None.

Fix Information

Add a sys db tunable to make Sweep and Flood vectors be rate-limited per-TMM process.

Behavior Change