Loading...
Loading...
PCCD might restart because there is not enough memory.
Depending on conditions, when there is not enough memory, PCCD might restart. This is because the blob compilation needs more memory based on the number of rules.
A large firewall rule set, resulting in a correspondingly large blob.
Provision more memory and then restart the BIG-IP system daemons. To do so, following these steps: 1. Modify the following section in /usr/bin/mprov.pl: Nominal/Baseline Configuration: my %afmModule = ( "Name" => "afm", "flags" => 0, "mem" => { # in MiB RATIO in MiB # NOTE: memory MiB numbers must be in multiples of 2 (the system pagesize) "self" => { "MIN"=> 128, "NOM"=> 20, "MAX"=> 1024 }, "host" => { "MIN"=> 500, "NOM"=> 13, "MAX"=> 3372 }, "tmos" => { "MIN"=> 0, "NOM"=> 60, "MAX"=> 0 }, "ui" => { "MIN"=> 0, "NOM"=> 0, "MAX"=> 0 }, }, Modified Configuration (for 8GB allocation for the Rule Compiler): my %afmModule = ( "Name" => "afm", "flags" => 0, "mem" => { # in MiB RATIO in MiB # NOTE: memory MiB numbers must be in multiples of 2 (the system pagesize) "self" => { "MIN"=> 128, "NOM"=> 20, "MAX"=> 1024 }, "host" => { "MIN"=> 4500, "NOM"=> 30, "MAX"=> 9000 }, "tmos" => { "MIN"=> 2000, "NOM"=> 0, "MAX"=> 0 }, "ui" => { "MIN"=> 0, "NOM"=> 0, "MAX"=> 0 }, }, 2. To restart the BIG-IP system daemons: From the command prompt, run the following command: bigstart restart. 3. To verify the Memory Provisioning: From the tmsh CLI, ensure the provisioned memory is 9000 MiB, using the command: list sys db provision.memory.afm.host. 4. Increase pccd.maxblobsize to 9000 MB.
None
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.