Bug ID 1110893: Some portions of the BIG-IP GUI do not work when accessed behind an HTTP proxy

Last Modified: Feb 07, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
17.0.0, 16.1.3, 16.1.2.2, 15.1.8, 15.1.7, 15.1.6, 15.1.5.1, 14.1.5, 14.1.4.6, 13.1.5

Fixed In:
17.1.0, 16.1.4, 15.1.9

Opened: May 30, 2022

Severity: 2-Critical

Symptoms

Some sections of the BIG-IP GUI fail to load properly, and may report "An error occurred:" Additionally, iControl REST calls may fail with a 401 unauthorized error.

Impact

Some portions of the GUI are broken as well as iControl REST calls may fail.

Conditions

-- BIG-IP GUI or iControl REST is accessed behind a proxy that that includes an X-Forwarded-For header -- The "httpd.matchclient" BigDB key is set to true (this is the default).

Workaround

Disable the "httpd.matchclient" DB key: tmsh modify sys db httpd.matchclient value false bigstart restart httpd

Fix Information

REST Auth token client ip address and mod_auth_pam client ip address should match

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips