Bug ID 599121: Under heavy load, hardware crypto queues may become unavailable.

Last Modified: Nov 07, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2

Fixed In:
13.0.0, 12.1.3, 12.1.2 HF1

Opened: Jun 14, 2016
Severity: 2-Critical
Related Article:
K24036315

Symptoms

When the BIG-IP system is under heavy load, it may erroneously determine that the hardware crypto queues are unavailable and trigger an HA failover event.

Impact

HA failover. You might see messages similar to the following: -- crit tmm2[22560]: 01010025:2: Device error: crypto codec cn-crypto-2 queue is stuck. -- warning sod[6892]: 01140029:4: HA crypto_failsafe_t cn-crypto-2 fails action is failover. -- notice sod[6892]: 010c0052:5: Standby for traffic group /Common/traffic-group-1.

Conditions

BIG-IP system under heavy load and using hardware crypto.

Workaround

None.

Fix Information

BIG-IP system now performs an extra check to determine whether the crypto hardware queues are available.

Behavior Change