Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP APM
Known Affected Versions:
11.6.0
Fixed In:
11.6.1
Opened: Dec 08, 2015 Severity: 3-Major Related Article:
K55561335
Under heavy authentication requests from tmm with a slow or down back-end authentication server, the apd accept connection queue could get full, resulting in apd logs: AD module: authentication with '1439805563539620' failed: Too many open files.
Authentication failures; might bring authentication rate down to zero.
- Incoming authentication request to apd (from tmm) is very high. - Back-end authentication server is slow or down.
Adjust the value of connhwm, connlwm and soconnmax values using tmsh commands. - To set the value to 1024, use the following command: sysctl -w net.core.somaxconn=1024. - Change Low water mark first using the following command: tmsh modify sys db apm.apd.connlwm value 480. - Change highwater mark next using the following command: tmsh modify sys db apm.apd.connhwm value 512.
Values of high-water and low-water mark for the 'apd' pending request queue now handle requests as expected.