Forum Discussion

Joad's avatar
Joad
Icon for Nimbostratus rankNimbostratus
Jun 18, 2019
Solved

ASM bypass_upon_load variable

Hi all, when you enable the bypass_upon_load variable , web application traffic bypasses the BIG-IP ASM system when there are insufficient resources for BIG-IP ASM service.   I would like to kno...
application delivery
ASM Advanced WAF
  • Andrew-F5's avatar
    Andrew-F5
    Jun 19, 2019

    By default, the bypass kicks in if the system idle is under 10% (i.e., is 90% used); this can be altered by changing the "bypass_under_high_cpu" system variable from 10 to some other value.

     

    /usr/share/ts/bin/add_del_internal update bypass_under_high_cpu <value>

     

    Sample log when the event has started:

    "High CPU Utilization: event code I617 Bypassing ASM"

     

    There is no log indicating the event has ceased, you'll just stop seeing additional logs.

Andrew-F5's avatar
Andrew-F5
Icon for Employee rankEmployee
Jun 19, 2019

By default, the bypass kicks in if the system idle is under 10% (i.e., is 90% used); this can be altered by changing the "bypass_under_high_cpu" system variable from 10 to some other value.

 

/usr/share/ts/bin/add_del_internal update bypass_under_high_cpu <value>

 

Sample log when the event has started:

"High CPU Utilization: event code I617 Bypassing ASM"

 

There is no log indicating the event has ceased, you'll just stop seeing additional logs.