Bug ID 600028: Bad actor detection is per TMM .

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
iApps None(all modules)

Opened: Jun 17, 2016
Severity: 3-Major
Related AskF5 Article:
K15023

Symptoms

The Bad Actor detection PPS value is enforced per TMM. The value entered should reflect the overall desired rate in PPS, divided by the number of TMMs. For example, the 2250 platform has 10 TMMs. To achieve a detection threshold of 1000 PPS, the value configured should be 100. Note that if traffic is unevenly distributed, one TMM may reach the detection threshold while the overall level is still low.

Impact

DOS detection. Unexpected operation.

Conditions

Configuring Bad Actor detection PPS value.

Workaround

Workaround: When specifying PPS for Bad Actor Detection, divide by the number of cores (TMMs) on your system.

Fix Information

None

Behavior Change