For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Dec 08, 2015

iRule killing BIG-IP

Hi,   I have huge issue with iRule obviously killing BIG-IP 2000. In tests iRule logic works OK, but under load BIG-IP is overloaded.   Scenario:   BIG-IP no iRule, 30 to 40k concurrent con...
devops
irule optimization
iRules
LTM
performance
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Dec 09, 2015

I wonder if this iRule should really kill my VE:

    for {set i 0} { $i < $stbl_size } {incr i} {

        set cookie_value "[string range [AES::key 128] 15 end][string range [AES::key 128] 15 end]"

        table set -subtable $stbl_name $cookie_value 1 0 $stbl_life

    }

where $stbl_size is 5 000 is killing my 2 vCPU 8GB RAM VE? I bet it's set cookie_value. Is that really such resource hog?

Not always but often execution of this loop results in:

  • Dec 9 19:17:48 bigip11 emerg logger: Re-starting bigd
  • Dec 9 19:18:10 bigip11 emerg logger: Re-starting tmm
  • Dec 9 19:18:10 bigip11 emerg logger: Re-starting tmm1

My [clock clicks -milliseconds] calculations are reporting around 32 300 ms to perform above loop.

Piotr