Bug ID 546823: PCCD Firewall compilation takes a long time

Last Modified: Nov 07, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP AFM(all modules)

Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Fixed In:
13.0.0

Opened: Sep 18, 2015
Severity: 4-Minor
Related Article:
K38363235

Symptoms

PCCD Firewall compilation can take several minutes to complete if your config contains a lot of firewall contexts, even if they are relatively small (with very few rules per context, e.g., 5 or fewer rules per context).

Impact

Compiling the firewall policies might take several minutes.

Conditions

1. Your configuration contains a lot of firewall contexts (e.g., 1500 or more virtual servers with enforced policies configured.) 2. Very few rules per context, e.g., 5 or fewer rules per context.

Workaround

None.

Fix Information

Performance for compiling firewall policies containing a lot of firewall contexts has been restored.

Behavior Change