Last Modified: Apr 28, 2025
Affected Product(s):
BIG-IP APM
Fixed In:
17.5.0
Opened: Apr 08, 2024 Severity: 2-Critical
When the user configures view_proxy in iApp using "If external clients use a network translated address to access View, what is the public-facing IP address?" (or) In VPE using variable assign, APM VMware VDI does not consider this value in patching PCoIP connection. It only finds the Host Header value or virtual server IP address.
In some network deployments, the user will not be able to open a PCoIP connection to the desktop/app.
This issue is seen when: 1. The view_proxy is configured. 2. PCoIP is used to connect to a desktop/app.
When HTTP_REQUEST { if { [HTTP::uri] contains "/broker/xml" } { set jsid [HTTP::cookie value JSESSIONID] if { $jsid != "" } { set ctype [ACCESS::session data get -sid $jsid session.client.type] if { $ctype != "" && $ctype == "apm-webtop" } { set vproxy [ACCESS::session data get -sid $jsid view.proxy_addr] set old_host [HTTP::host] if { $vproxy != "" && $old_host != "" && $vproxy != $old_host } { HTTP::header replace "Host" $vproxy log local0. "Replaced - jsid = $jsid vproxy = $vproxy host = $old_host" } } } } }
APM VMware VDI should use the view_proxy address instead of the host header.