Bug ID 558059: Search AFM rule cause GUI lost connection forever

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0, 12.0.0 HF3

Opened: Nov 13, 2015

Severity: 2-Critical

Symptoms

IHIS configured about 150K micro AFM rules. when they search rule from GUI, the GUI will lost connectivity and never come back, they have to restart tomcat to recover it.

Impact

GUI is unusable.

Conditions

in AFM rule page, search any rule, after click "Search" button, GUI will be disconnected. from the tomcat debug log, periodically SQL executions could be founds, but no ending.

Workaround

Improvements to mcp to optimize queries. Removed the expand all option for rule lists. Added option to disable stats from displaying on the active rules page

Fix Information

We added an option under Security :: Options : Network Firewall to disable statistics. For the IHIS config, the statistics need to be disabled. The "expand all" option for rule-lists in the Active rules page has been removed.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips