Bug ID 619110: Slow to delete URLs, CPU spikes with Automatic Policy Builder

Last Modified: Oct 22, 2018

Bug Tracker

Affected Product:  See more info
BIG-IP ASM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
13.0.0, 12.1.3

Opened: Sep 27, 2016
Severity: 2-Critical

Symptoms

Deleting a URL causes an incorrect event to be generated and logged for every other URL in the Policy. When a policy has many URLs configured, deleting a URL takes a long time and consumes heavy CPU time.

Impact

1) GUI is slow to delete URLs 2) Misleading (incorrect) logs are present in the audit log for each other URL in the system after a URL delete. 3) CPU can spike to 100%

Conditions

Many URLs are configured in the Policy. This can be due to Policy Builder being set to "Always" learn new HTTP URLs. If Policy Builder is also configured to collapse common URLs to wildcards, then it deletes the collapsed urls and these calls can be resource intensive.

Workaround

A) Change "Learn New HTTP URLs" mode to "Selective" from "Always" B) Disable collapse URLS.

Fix Information

URL delete no longer incorrectly generates an event for every other URL in the system.

Behavior Change