Last Modified: Oct 04, 2024
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3, 16.1.5, 16.1.5.1
Opened: Apr 12, 2024 Severity: 3-Major
If the Standby unit of an HA pair configured for MRF mirroring drops a message, the TCP state will be out of sync between the two units and possibly cause the Standby to fail to pass traffic when it goes Active.
After a failover, TMM will ACK incoming MRF messages and not forward them to the peer.
BIG-IP configured with HA mirroring and MRF profile_diameterrouter_stat.common.tot_messages_standby_dropped has incremented on the affected profile A failover occurs
Delete the affected connflow. Ensure that messages are not dropped on the standby by any or all of the following: - Increase the mirrored-message-sweeper-interval: modify ltm message-routing diameter profile router <name> mirrored-message-sweeper-interval 1000 -> 5000 - Ensure that the HA connection does not have excessive latency or packet loss. The "Buffered" stat in the ha-mirror statistics table should be low. See K54622241 for details. - Ensure that the Maximum Pending Messages setting in the Diameter router profile is high enough to handle the message load.
None