Bug ID 1284589: HTTP CONNECT request from client is not successful with the iRule 'HTTP::disable discard' command

Last Modified: Apr 04, 2025

Affected Product(s):
BIG-IP All(all modules)

Known Affected Versions:
16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1

Fixed In:
17.5.0, 16.1.4

Opened: Apr 04, 2023

Severity: 3-Major

Symptoms

When you use the 'HTTP::disable discard' command in an irule to switch to HTTP transparent passthrough mode, the proxy connect / connection to server is not established. This only occurs when the 'HTTP::disable' command is used with the additional 'discard' option (which discards the existing HTTP headers before switching to passthrough mode) Refer https://clouddocs.f5.com/api/irules/HTTP__disable.html

Impact

Client requests containing the HTTP CONNECT method hang (data is not proxied to the serverside flow)

Conditions

-> Basic HTTP VS -> iRule when HTTP_REQUEST { HTTP::disable discard node <ip port> }

Workaround

Use 'HTTP::disable' command (without the 'discard' option)

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips