Forum Discussion
Nimbostratusasm practices for CPU/ memory tuning
Hi,
Considering an environment with standalone ASM deployment (BIG-IP 4000, 30 VS, 15 security policies without important changes for the last year), and a CPU usage between 40-45%. Will the CPU percentages increase considerably by adding features such as Anomaly detection and/or DoS protection to all security policies, while the system is not under attacks related to said features? And what would happen during an attack?
Thanks
2 Replies
samstepCirrocumulus
If you have learning enabled on ASM all the time then that does consume CPU, also anomaly detection based on on URL or client-side integrity will consume CPU.
A particular hog is event correlation, check out this article:
https://support.f5.com/csp/article/K22029939
It is not possible to predict CPU usage under attack, depends on your policy! If you have performance concerns you should consider scaling your architecture/upgrading ASM hardware
- samstep
If you have learning enabled on ASM all the time then that does consume CPU, also anomaly detection based on on URL or client-side integrity will consume CPU.
A particular hog is event correlation, check out this article:
https://support.f5.com/csp/article/K22029939
It is not possible to predict CPU usage under attack, depends on your policy! If you have performance concerns you should consider scaling your architecture/upgrading ASM hardware
