Last Modified: Sep 13, 2023
BIG-IP AFM, PEM
Known Affected Versions:
12.1.5, 18.104.22.168, 22.214.171.124, 126.96.36.199, 12.1.6
Opened: Dec 10, 2018 Severity: 3-Major
PEM URLCAT looks up the URL in the local webroot database of 20 million entries. If an entry is not found in the webroot local DB, a message is sent to webroot website. The results from the web lookup are stored in a per tmm local cache, which can hold 128K entries (by default). If the local cache fills up, the cloud query no longer happens. It is required to clear up some space in the cloud cache to accommodate the new entries.
Cloud query no longer happens for new requests.
If the local cache fills up, the cloud query no longer happens.
10% of the per tmm local cache will be cleared and new entries will be added in this space only. The last 10% of memory will always be cleared if the local cache is full.
The entries in the cloud cache will be evicted, if the cache becomes full. Prior to this change, the cloud lookup would stop altogether once the cache was full.