Forum Discussion

fmartos_30060's avatar
fmartos_30060
Icon for Nimbostratus rankNimbostratus
Aug 11, 2010

Policy Optimization

Hi,

 

 

as well as non-optimized iRules can drive LTMs to a very high CPU usage, and even to a service outage, non-optimized ASM policies can do exactly the same thing.

 

 

I think, some of you, are very experience building Policies, and can share advices to us, people starting with ASM.

 

 

Anyone want to write down the first optimization advice?

 

  • Ido_Breger_3805's avatar
    Ido_Breger_3805
    Historic F5 Account
    Hi,

     

    In my opinion, the risk is significantly lower than iRules.

     

    For example, ASM performance isn't that affected by the number of items in the policy.

     

    There are features that consume more resources than others but they do provide security value…

     

    My first question to you is what kind of optimization you would like to do?

     

    Would you be willing to sacrifice security for performance? - I am not against it but many times this is the tradeoff.

     

    Do you have a performance issue at all?