Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP AFM
Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.6.2 HF1, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2
Fixed In:
12.0.0, 11.6.0 HF5, 11.5.2 HF1
Opened: Jan 20, 2015 Severity: 3-Major
There is a need for Sweep and Flood vectors to be very accurate (+-5%). To ensure that Sweep and Flood can be very accurate the system needs a mode in which the Sweep and Flood vectors work per-TMM process. In this case the traffic must be very well distributed for it to be effective. BIG-IP systems now has a sys db tunable which is: dos.globalsflimits which is true by default. If the tunable is set to false, then the Sweep and Flood vectors work per-TMM process. The limits that have been configured are divided equally among the various TMM processes, and because the traffic is well-distributed among the TMM processes, the system will get close to the limits specified.
If the db variable is changed to false, the incoming traffic must be well distributed.
When Sweep and Flood vector is enabled in AFM module.
None.
Add a sys db tunable to make Sweep and Flood vectors be rate-limited per-TMM process.