Last Modified: Oct 16, 2023
Affected Product(s):
BIG-IP APM
Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.2.1, 11.4.1, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2
Fixed In:
12.1.0, 12.1.0, 12.0.0, 11.6.1 HF1, 11.6.0 HF5, 11.5.4 HF3
Opened: Jan 27, 2015 Severity: 3-Major Related Article:
K17554
When the BIG-IP system is under heavy load, it may erroneously determine that the hardware crypto queues are unavailable and trigger an HA failover event.
HA failover. You might see messages similar to the following: -- crit tmm2[22560]: 01010025:2: Device error: crypto codec cn-crypto-2 queue is stuck. -- warning sod[6892]: 01140029:4: HA crypto_failsafe_t cn-crypto-2 fails action is failover. -- notice sod[6892]: 010c0052:5: Standby for traffic group /Common/traffic-group-1.
BIG-IP system under heavy load and using hardware crypto.
None.
BIG-IP system now performs an extra check to determine whether the crypto hardware queues are available.