Bug ID 556417: GUI and tmsh Interfaces May be Unresponsive While Loading Huge Firewall Rule Configuration

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0, 12.0.0 HF3

Opened: Nov 05, 2015

Severity: 3-Major

Symptoms

Users may face slow response times or in some cases unresponsive interfaces (GUI, tmsh, etc.).

Impact

All releases until 12.1.0 except all new hotfixes that are currently in the pipeline (01/06/2016)

Conditions

The problem exacerbates if the system has a big firewall rule configuration. Especially complex configuration which involve rule-lists, address-lists, etc. may cause additional delays or cause unresponsive behavior.

Workaround

GUI no longer allows expand all option for rule-lists when the total count of rules exceeds a pre-determined threshold.

Fix Information

The data processing mechanism used for displaying firewall rules has been changed for optimization. New set of GUI optimizations have been implemented.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips