Bug ID 965777: Per-request policy authentication becomes unresponsive

Last Modified: Oct 16, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6

Fixed In:
16.1.0, 15.1.6.1

Opened: Nov 19, 2020

Severity: 2-Critical

Symptoms

Per-request policy execution can appear to be slow during subroutine evaluation, and apmd appears to take a large amount of CPU.

Impact

Connectivity may be impaired or lost.

Conditions

The per-request policy is using subroutine to execute an authentication related agent that is dispatched to apmd for completion. These typically involve authentication agents that interact with an external authentication server, such as LDAP, RADIUS, or AD.

Workaround

Failover the high availability (HA) pair, or restart apmd.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips