Last Modified: Nov 07, 2022
Affected Product:
See more info
BIG-IP APM
Known Affected Versions:
11.2.1, 11.4.1, 11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.10, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.5.3 HF2, 11.5.4, 11.5.4 HF1, 11.5.4 HF2, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4
Fixed In:
12.0.0, 11.6.1 HF1, 11.6.0 HF5, 11.5.4 HF3
Opened: Jan 27, 2015
Severity: 3-Major
Related Article:
K17554
When the BIG-IP system is under heavy load, it may erroneously determine that the hardware crypto queues are unavailable and trigger an HA failover event.
HA failover. You might see messages similar to the following: -- crit tmm2[22560]: 01010025:2: Device error: crypto codec cn-crypto-2 queue is stuck. -- warning sod[6892]: 01140029:4: HA crypto_failsafe_t cn-crypto-2 fails action is failover. -- notice sod[6892]: 010c0052:5: Standby for traffic group /Common/traffic-group-1.
BIG-IP system under heavy load and using hardware crypto.
None.
BIG-IP system now performs an extra check to determine whether the crypto hardware queues are available.
