Bug ID 707961: Unable to add policy to virtual server; error = Failed to compile the combined policies

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 14.0.0, 14.0.0.1, 14.0.0.2

Fixed In:
14.1.0, 14.0.0.3, 13.1.0.8

Opened: Feb 26, 2018

Severity: 3-Major

Related Article: K50013510

Symptoms

LTM policy does not compile if it has more than one similar condition, and some of them refer to datagroup and others to non-datagroup types. The policy compiles if similar conditions all refer to datagroups or to non-datagroups. 010716d8:3: Compilation of ltm policies for virtual server /Common/vs_name failed; Failed to compile the combined policies.

Impact

LTM policy does not compile. Cannot use the policy.

Conditions

-- LTM policy that has more than one similar condition. -- Some conditions refer to datagroup types. -- Some conditions refer to non-datagroup types. Following is an example of such an LTM policy (i.e., referring to both datagroup and non-datagroup types): ltm policy /Common/example_ltm_policy { published-copy /Common/block_URI requires { http } rules { example_Rule { conditions { 0 { http-host host datagroup /Common/example_datagroup <------ Datagroup } 1 { http-host host values { example.com } <------ Non-Datagroup } } } } strategy /Common/first-match }

Workaround

Create a datagroup for the non-datagroup type and use it in policy instead.

Fix Information

LTM Policy compiles if it has more than one similar condition, and some of them refer to datagroup and others to non-datagroup types.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips