Bug ID 619110: Slow to delete URLs, CPU spikes with Automatic Policy Builder

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
12.1.0, 12.1.1, 12.1.2

Fixed In:
13.0.0, 12.1.3

Opened: Sep 27, 2016

Severity: 2-Critical

Symptoms

Deleting a URL causes an incorrect event to be generated and logged for every other URL in the Policy. When a policy has many URLs configured, deleting a URL takes a long time and consumes heavy CPU time.

Impact

1) GUI is slow to delete URLs 2) Misleading (incorrect) logs are present in the audit log for each other URL in the system after a URL delete. 3) CPU can spike to 100%

Conditions

Many URLs are configured in the Policy. This can be due to Policy Builder being set to "Always" learn new HTTP URLs. If Policy Builder is also configured to collapse common URLs to wildcards, then it deletes the collapsed urls and these calls can be resource intensive.

Workaround

A) Change "Learn New HTTP URLs" mode to "Selective" from "Always" B) Disable collapse URLS.

Fix Information

URL delete no longer incorrectly generates an event for every other URL in the system.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips