Last Modified: Nov 07, 2022
Affected Product:
See more info
BIG-IP TMOS
Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6
Fixed In:
13.0.0
Opened: Jan 29, 2016
Severity: 3-Major
A couple dozen singly linked lists can get memberships in the thousands, where some operations require scanning to search.
Slower performance as scale increases.
When IPsec gets large populations of either configured objects, or security associations for actual traffic, without hashmaps some operations would have linear cost.
There is no workaround at this time.
Hashmaps replace many singly linked lists, greatly reducing search time when membership population is large. In some cases, additional changes increase general stability.
