Bug ID 503362: PEM policy custom filter

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP PEM(all modules)

Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4

Opened: Jan 28, 2015
Severity: 3-Major

Symptoms

The PEM policy custom filter specifies iRules that evaluate to true or false. If the iRule command parks, the behavior is undefined.

Impact

Subscriber traffic after the first subscriber can be blocked.

Conditions

This occurs when using iRule PEM commands that park the interpreter. One example is PEM::Subscriber. Another is PEM::Session.

Workaround

Make sure the iRule commands specified in the custom filter are not asynchronous, as the commands may fail. For more information on iRule commands that park the tcl interpreter, see SOL12962: Some iRule commands temporarily suspend iRule processing at https://support.f5.com/kb/en-us/solutions/public/12000/900/sol12962.html

Fix Information

None

Behavior Change