Forum Discussion
What is the maximum count of objects, rules and other configuration based objects be used in F5-ASM, AFM & APM
Is there a documentation, where we can find what the maximum count of objects (each type available with the module) like rules, policies and other configuration entities can be created & used in F5 products ASM, AFM & APM deployed on the high-end hardware platform model available as of today.
I do find limited information in forum, but i prefer if anybody could share me document/link where the configuration capacity limit is defined for each module.
5 Replies
- Josiah_39459Historic F5 Account
There is no limitation built into the software, because the software is meant to handle various hardware and even future hardware. You can add as much as your hardware can handle.
- Hussein_Ghazy_3
Nimbostratus
Well i disagree will that, we have more than 800 VS, and 250+ ASM policy, Using Viprions Blades 2250. The ASM DB MYSQL crashed many times and off course the ASM failure triggered a failover. After opening a ticket and discussing for days with F5 support , the f5 Support recommendations was to start splitting the VS over more than one virtual guest, because the SW can not handle the traffic. When we did the split the ASM DB never crashed since and we never had to do an ASM DB recovering again. May be the limitations are not written in a document, but they exist. FYI, We have only LTM and ASM modules active. No APM or AFM. Hope that helps regards - jgranieri_42214
Nimbostratus
Just curious you were using the Viprion as VCMP mode?
- JG
Cumulonimbus
All operating systems have limits, explicitly stated or not, that a software must operate within, on top of the limits it sets for itself. As automation - not a bad thing in itself - has become a fad (read "not sensible"), there is a lot of pressure for F5 admins to just do it anyhow in order to meet the "business requirement". So this is a question we do need an answer for in planning for hundreds or thousands of objects to be created as the result of the automation process.
It is not hard to get the limits of CentOS, which F5 is based on, from its source code, but not easy to get the limits of the other things. And I suppose we'd need to know particularly the supported limits, ones that would not impact on performance and service availability.
Thanks for sharing your real world experience.
You could talk to your sales representatives or professional services for some advice on sizing your deployment. Unfortunately there is no single magic number to determine the maximum size of a deployment. ASM/APM I know to be trickier to size up, especially if you add in features such as the real-time policy builder.
As the others stated, the deployment size would be limited by your hardware's overall capacity. In terms of number of objects, I've been told it's simply limited by the available memory, but that obviously would change based on your expected number of current connections and other factors.