Last Modified: Jul 08, 2025
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.5.0
Fixed In:
17.5.1
Opened: Nov 28, 2024 Severity: 2-Critical
IPv4 packets for TLS alerts contain empty IP checksums.
Empty checksums will cause TLS clients to reject TLS alert messages.
-- The ixlv driver is used by tmm -- TSO is disabled
Change driver type to use xnet in tmm_init.tcl by inputting `device driver pci vendor_dev 8086:1889 xnet` or for a specific PCI device with `device driver pci XX:XX.X xnet`
Removed offloading IPv4 header checksum to the hardware unless TSO is on and so use what BIG-IP calculates instead.