Bug ID 600028: Bad actor detection is per TMM .

Last Modified: Jul 12, 2023

Affected Product(s):
iApps None(all modules)

Opened: Jun 17, 2016

Severity: 3-Major

Related Article: K15023

Symptoms

The Bad Actor detection PPS value is enforced per TMM. The value entered should reflect the overall desired rate in PPS, divided by the number of TMMs. For example, the 2250 platform has 10 TMMs. To achieve a detection threshold of 1000 PPS, the value configured should be 100. Note that if traffic is unevenly distributed, one TMM may reach the detection threshold while the overall level is still low.

Impact

DOS detection. Unexpected operation.

Conditions

Configuring Bad Actor detection PPS value.

Workaround

Workaround: When specifying PPS for Bad Actor Detection, divide by the number of cores (TMMs) on your system.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips