For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Lokesh_R's avatar
Lokesh_R
Icon for Nimbostratus rankNimbostratus
Oct 30, 2018

High CPU on AFM

I Could see intermittent CPU spike , In top i could see mysql utilizing more so i killed the MYSQL ,But still i could see spike .  
AFM
application delivery
Lokesh_R's avatar
Lokesh_R
Icon for Nimbostratus rankNimbostratus
Nov 02, 2018

What BIG-IP version are you running? 12.1.2 - Hotfix HF1 What modules are you running? only AFM module How often does it happen? hourly we getting spike What CPU cores are affected by the spikes? Core 1 and 3 . Also Analysis plan Are you experiencing any slowness/latency from the client side? Is it a problem? Client not reported.

 

  • Philip_Jonsson's avatar
    Philip_Jonsson
    Icon for MVP rankMVP
    Nov 05, 2018

    Hey Lokesh

     

    Since you are only seeing spikes on Core 1 and Core 3, this indicates that this is Control Plane activity and it should not affect client traffic. Starting with BIG-IP 11.5.0, all even cores are reserved for TMM (Client Traffic) and the uneven cores are reserved for Control Plane Activity. Please see: K15468: Overview of BIG-IP TMM CPU usage

     

    On some of F5's products, you can see CPU spikes for Control Plane activity which is completely normal. Since you are seeing high CPU on mysqld it could be related to Event Logging or reporiting/charts since AFM relies on mysqld for those functions. The CPU spikes could also be related to Policy Compilation activity.

     

    Since you are not experiencing any problems for the clients I'd say it should be fine but if you still want to investigate then check the active processes during the CPU spike and correlate with the logs. Most likely it is just operating as it should.