Bug ID 644855: irules with commands which may suspend processing cannot be used with proactive bot defense

Last Modified: Apr 28, 2025

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 13.0.0

Fixed In:
13.1.0, 13.0.0 HF1, 12.1.3

Opened: Feb 14, 2017

Severity: 3-Major

Symptoms

A request is dropped.

Impact

All requests which issue the proactive bot defense and the iRule will get dropped.

Conditions

1. The proactive bot defense is assigned to the virtual. 2. An iRule which suspends processing is assigned to the virtual. (includes a command like the "after" commands") For more information on which TCL commands park, see K12962: Some iRule commands temporarily suspend iRule processing, available at https://support.f5.com/csp/article/K12962

Workaround

N/A

Fix Information

irules which suspends the execution won't cause a request drop when the proactive bot defense is assigned.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips