How to optimize SSL VPN connections when BIG-IP is reaching 100% CPU

With a significant increase in the number of remote workers (for example COVID-19), you may see an increase in the number of SSL VPN connections as well as increased CPU usage. This article covers te...
Published Mar 18, 2020
Version 1.0
BIG-IP Access Policy Manager (APM)
security
TMOS
lnxgeek's avatar
lnxgeek
Icon for MVP rankMVP
Mar 23, 2020

When I try to run the client-traffic-classifier tmsh commands it errors out with this:

 tmsh create apm resource client-traffic-classifier client-traffic-classifier-1 { entries add { entry { client-rate-class rate_class_1M dst-ip any dst-mask any dst-port https src-ip any src-mask any } entry0 { client-rate-class rate_class_2M dst-ip any dst-mask any dst-port any src-ip any src-mask any } } }
 
 
01071278:3: The client traffic classifier (/Common/client-traffic-classifier-1) has conflict entries ("entry0"  rate "/Common/rate_class_2M" from any:0 to any:0 via vpn, "entry"  rate "/Common/rate_class_1M" from any:0 to any:443 via vpn).