Applies To:

Show Versions Show Versions

sol14058: TMM CPU utilization may spike when using an iRule with the 'table add' command
Known IssueKnown Issue

Original Publication Date: 12/11/2012
Updated Date: 05/17/2013

Description

TMM CPU utilization may spike when using an iRule with the table add command.

This issue occurs when all of the following conditions are met:

  • The virtual server contains the following configuration:

    • A Client SSL profile with Client Certificate set to require
    • An iRule uses the table add command within a CLIENTSSL_CLIENTCERT event: 

      when CLIENTSSL_CLIENTCERT {
      table add key value
      }

  • The client presents an invalid SSL client certificate

Impact

This behavior may result in TMM dumping core and restarting. 

Symptoms

As a result of this issue, you may encounter the following symptoms:

  • BIG-IP iHealth lists Heuristic H380104 on the Diagnostics > Identified > Medium screen.
  • Unusually high TMM CPU usage
  • TMM core dumps and restarts

Status

F5 Product Development has assigned ID 374923 to this issue, and has confirmed that this issue exists in the products listed in the Applies To box. For information about releases or hotfixes that resolve this issue, refer to the following table:

Type of Fix
Versions Fixed
Related Articles
Release 11.3.0 SOL2200: Most recent versions of F5 software
Hotfix 10.2.4 HF5
SOL9502: BIG-IP hotfix matrix

Workaround

To work around this issue, you can modify the iRule to verify that the client certificate is valid before running the table add command.

Impact of workaround: iRule logic will need to be evaluated and implemented.

For more information about the CLIENTSSL_CLIENTCERT event or the table command, refer to the following DevCentral articles:

https://devcentral.f5.com/wiki/irules.CLIENTSSL_CLIENTCERT.ashx

https://devcentral.f5.com/wiki/irules.table.ashx

A separate DevCentral login is required to access this content; you will be redirected to authenticate or register (if necessary).

Supplemental Information

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)