Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6
Fixed In:
13.0.0
Opened: Jan 29, 2016 Severity: 3-Major
A couple dozen singly linked lists can get memberships in the thousands, where some operations require scanning to search.
Slower performance as scale increases.
When IPsec gets large populations of either configured objects, or security associations for actual traffic, without hashmaps some operations would have linear cost.
There is no workaround at this time.
Hashmaps replace many singly linked lists, greatly reducing search time when membership population is large. In some cases, additional changes increase general stability.