Bug ID 546823: PCCD Firewall compilation takes a long time

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Fixed In:
13.0.0

Opened: Sep 18, 2015

Severity: 4-Minor

Related Article: K38363235

Symptoms

PCCD Firewall compilation can take several minutes to complete if your config contains a lot of firewall contexts, even if they are relatively small (with very few rules per context, e.g., 5 or fewer rules per context).

Impact

Compiling the firewall policies might take several minutes.

Conditions

1. Your configuration contains a lot of firewall contexts (e.g., 1500 or more virtual servers with enforced policies configured.) 2. Very few rules per context, e.g., 5 or fewer rules per context.

Workaround

None.

Fix Information

Performance for compiling firewall policies containing a lot of firewall contexts has been restored.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips