Last Modified: Dec 20, 2018
See more info
Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 18.104.22.168, 22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168, 12.1.4
Opened: Jan 29, 2016
A couple dozen singly linked lists can get memberships in the thousands, where some operations require scanning to search.
Slower performance as scale increases.
When IPsec gets large populations of either configured objects, or security associations for actual traffic, without hashmaps some operations would have linear cost.
There is no workaround at this time.
Hashmaps replace many singly linked lists, greatly reducing search time when membership population is large. In some cases, additional changes increase general stability.