Bug ID 615377: Unexpected rate limiting of unreachable and ICMP messages for some addresses.

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
12.1.0, 12.1.1

Fixed In:
13.0.0, 12.1.2

Opened: Sep 09, 2016

Severity: 3-Major

Related Article: K44812723

Symptoms

The BIG-IP system might fail to send RSTs, ICMP unreachable, or ICMP echo responses for some addresses. /var/log/ltm might contain messages similar to the following: -- Limiting icmp unreach response from 251 to 250 packets/sec. -- Limiting icmp ping response from 251 to 250 packets/sec. -- Limiting closed port RST response from 251 to 250 packets/sec.

Impact

Certain response messages from addresses in one or more traffic-groups (but not all) might be rate limited by the BIG-IP system even though the level of traffic has not exceeded the tm.maxrejectrate setting.

Conditions

Certain traffic patterns to addresses in two or more different traffic-groups.

Workaround

None known.

Fix Information

The rate limiting messages in the ltm log will now include the name of the traffic group that is being rate limited. Example old log message: warning tmm[6167]: 011e0001:4: Limiting icmp ping response from 251 to 250 packets/sec. Example new log message: warning tmm[19109]: 011e0001:4: Limiting icmp ping response from 251 to 250 packets/sec for traffic group /Common/traffic-group-1.

Behavior Change

The rate limiting messages in the ltm log will now include the name of the traffic group that is being rate limited. Example old log message: warning tmm[6167]: 011e0001:4: Limiting icmp ping response from 251 to 250 packets/sec. Example new log message: warning tmm[19109]: 011e0001:4: Limiting icmp ping response from 251 to 250 packets/sec for traffic group /Common/traffic-group-1.

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips