Last Modified: Apr 10, 2019
Opened: Jun 17, 2016
Related AskF5 Article: K15023
The Bad Actor detection PPS value is enforced per TMM. The value entered should reflect the overall desired rate in PPS, divided by the number of TMMs. For example, the 2250 platform has 10 TMMs. To achieve a detection threshold of 1000 PPS, the value configured should be 100. Note that if traffic is unevenly distributed, one TMM may reach the detection threshold while the overall level is still low.
DOS detection. Unexpected operation.
Configuring Bad Actor detection PPS value.
Workaround: When specifying PPS for Bad Actor Detection, divide by the number of cores (TMMs) on your system.