Forum Discussion
How i can apply fast 700 ASM policies?
how can i do to quickly apply 700 asm poltiics with changes, in the old days you could give an option to apply all. how can i do it now?
i have a bash script to do it by curls, but it is one by one of the poltiics. Is it possible to do them all at the same time?
thanks
3 Replies
Hi unam91 ,
Have you to apply 700 ASM Policies to different VIPs or to one VIP with multiple policies.
can you elaborate
- unam91
Nimbostratus
Hi
each policy is associated with a different virtual server
Regards
- amolari
Cirrostratus
Hi
I believe here the wording "quickly" won't match the scenario. The apply process on AWAF is notably slow and the more policies you have on your system, slower will it be (link below provides some insights on why). ASM import/apply is sequential, no parallelism.
I've opened a support case about 9 months ago (customer has about 400 policies and uses automation to deploy). The escalation engineer provide some memory optimization tweaks (config file changes), that brough a gain in speed, but not that significative. It still takes a few hours.
Then there is an ASM API bulk endpoint (not much documented) that he tested for me. He said there is no significant performance gains, so we left it.
I suggest you to read this article: K000149262: BIG-IP 17.x Advanced WAF change in behavior - update configuration to bd
Sorry that I cannot help here.. suffering the same.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com