Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP PEM
Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2
Opened: Jan 28, 2015 Severity: 3-Major
The PEM policy custom filter specifies iRules that evaluate to true or false. If the iRule command parks, the behavior is undefined.
Subscriber traffic after the first subscriber can be blocked.
This occurs when using iRule PEM commands that park the interpreter. One example is PEM::Subscriber. Another is PEM::Session.
Make sure the iRule commands specified in the custom filter are not asynchronous, as the commands may fail. For more information on iRule commands that park the tcl interpreter, see SOL12962: Some iRule commands temporarily suspend iRule processing at https://support.f5.com/kb/en-us/solutions/public/12000/900/sol12962.html
None