Bug ID 965777: Per-request policy authentication becomes unresponsive

Last Modified: Jul 21, 2021

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1

Fixed In:
16.1.0

Opened: Nov 19, 2020
Severity: 2-Critical

Symptoms

Per-request policy execution can appear to be slow during subroutine evaluation, and apmd appears to take a large amount of CPU.

Impact

Connectivity may be impaired or lost.

Conditions

The per-request policy is using subroutine to execute an authentication related agent that is dispatched to apmd for completion. These typically involve authentication agents that interact with an external authentication server, such as LDAP, RADIUS, or AD.

Workaround

Failover the high availability (HA) pair, or restart apmd.

Fix Information

None

Behavior Change