Bug ID 599121: Under heavy load, hardware crypto queues may become unavailable.

Last Modified: Jul 13, 2024

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2

Fixed In:
13.0.0, 12.1.3, 12.1.2 HF1

Opened: Jun 14, 2016

Severity: 2-Critical

Related Article: K24036315

Symptoms

When the BIG-IP system is under heavy load, it may erroneously determine that the hardware crypto queues are unavailable and trigger an HA failover event.

Impact

HA failover. You might see messages similar to the following: -- crit tmm2[22560]: 01010025:2: Device error: crypto codec cn-crypto-2 queue is stuck. -- warning sod[6892]: 01140029:4: HA crypto_failsafe_t cn-crypto-2 fails action is failover. -- notice sod[6892]: 010c0052:5: Standby for traffic group /Common/traffic-group-1.

Conditions

BIG-IP system under heavy load and using hardware crypto.

Workaround

None.

Fix Information

BIG-IP system now performs an extra check to determine whether the crypto hardware queues are available.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips