Bug ID 669973: iRules reject from FLOW_INIT event does not respect tm.maxrejectrate

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1

Opened: Jun 19, 2017
Severity: 3-Major

Symptoms

When a reject is issued from FLOW_INIT, reject rate limiting has no effect.

Impact

The system can generate an unlimited number of reject segments (e.g. TCP RST) which may have performance implications.

Conditions

reject from FLOW_INIT

Workaround

None

Fix Information

None

Behavior Change