Bug ID 669973: iRules reject from FLOW_INIT event does not respect tm.maxrejectrate

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Opened: Jun 19, 2017

Severity: 3-Major

Symptoms

When a reject is issued from FLOW_INIT, reject rate limiting has no effect.

Impact

The system can generate an unlimited number of reject segments (e.g. TCP RST) which may have performance implications.

Conditions

reject from FLOW_INIT

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips