Bug ID 630137: Dynamic Signatures feature can fill up /config partition impacting system stability

Last Modified: Oct 17, 2023

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1

Fixed In:
14.1.0, 14.0.0, 13.1.1.2

Opened: Nov 23, 2016

Severity: 2-Critical

Symptoms

When the AFM DoS Dynamic Signatures feature is enabled, inadequate file housekeeping results in the /config/filestore partition filling up. mcpd halts the other running daemons and the system becomes unresponsive.

Impact

Traffic disrupted while TMM restarts.

Conditions

AFM DoS Dynamic Signatures feature enabled Configuration changes made but not saved Device receives traffic.

Workaround

Make all configuration changes via Configuration Tool (UI) or issue a 'save sys config partitions all' command. If rolling back the configuration is a requirement, before making changes to the configuration, save a configuration snapshot to a file with the 'save sys config file <filename>' command. You can then load the previous configuration with a 'load sys config file <filename>' command.

Fix Information

AFM DoS Dynamic Signatures file housekeeping improved, /config filestore no longer fills up.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips