Bug ID 565463: ASM-config consumes 1.3GB RAM after repeated Policy Import via REST

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
11.6.0, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0, 12.0.0 HF3, 11.6.1

Opened: Jan 04, 2016

Severity: 1-Blocking

Symptoms

Multiple ASM-config processes are running (more than 10) and consuming more than a GB.

Impact

The BIG-IP system might run low on memory and post the following message in /var/log/kern.log: Out of memory: Kill process 22699.

Conditions

ASM provisioned. Repeated policy import via REST.

Workaround

Restart asm - disrupting Restart asm_config_server.pl - non disrupting

Fix Information

We modified an operation to limit the number of ASM configuration processes. The operation now reuses processes instead of creating new ones, so the system no longer runs out of memory.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips