For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rezgui_180607's avatar
rezgui_180607
Icon for Nimbostratus rankNimbostratus
May 13, 2016

about the module AsM

Dear all, i have F5 2200 LTM, iwould like to know if i activate the module AMS how many percent can reduce teh perfermance of the f5 ltm?   who have some statistic about the consumption for the mo...
ASM Advanced WAF
devops
security
John_Buchanan_1's avatar
John_Buchanan_1
Icon for Altocumulus rankAltocumulus
May 13, 2016

AFAIK, activating the ASM module itself won't add much if any load. The load increase will occur after you've built a policy and begin applying it to your VS's, also dependent upon the traffic level of those VS's. You can keep an eye on exactly how much ASM is adding under Security -> Reporting -> Application -> CPU Utilization. We are running BIG-IP 5000's and I have ASM enabled for over 200 VS's. ASM accounts for between 25-30% of cpu utilization. Total throughput on a single unit is between 350 Mb/s to 400 Mb/s currently.

 

  • rezgui_180607's avatar
    rezgui_180607
    Icon for Nimbostratus rankNimbostratus
    May 13, 2016
    and what about the decrease the number of TPS?
  • John_Buchanan_1's avatar
    John_Buchanan_1
    Icon for Altocumulus rankAltocumulus
    May 13, 2016
    I'm not certain I understand your question. Are you asking at what point will the load from ASM module decrease the appliance's SSL TPS offload performance? That would be a better question for F5 themselves I think, but there would likely be a overall CPU usage threshold beyond which performance would begin to decline.