Bug ID 747225: PCCD may get into crash-loop after BIG-IP upgrade or after BIG-IP restart

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0,,,,,,,,, 13.1.1,,,,, 13.1.3,,,,,,, 13.1.4,, 13.1.5,, 14.1.2,,,,,,,,, 14.1.3

Fixed In:

Opened: Oct 18, 2018

Severity: 2-Critical


When there are scheduled firewall rules, and per-policy compilation optimization enabled, PCCD may enter crash-loop after installing new build. In very rare cases this can happen after regular BIG-IP restart. Per-policy compilation optimization is enabled by default, the sys db variable pccd.perpolicycompilation is true.


After this failure, an rare problem is that PCCD is continuously crashing. New firewall config is not applied on data traffic. The pre-upgrade firewall config is still applied on data traffic.


-- AFM is licensed and provisioned. -- There are scheduled firewall rules. -- Per-policy compilation optimization enabled (sys db variable pccd.perpolicycompilation is true) -- The BIG-IP system is upgraded or restarted


Set sys db variable pccd.perpolicycompilation to false.

Fix Information

PCCD works correctly in these conditions.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips