Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP All
Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1
Fixed In:
15.0.0, 14.1.4, 13.1.3
Opened: Feb 02, 2019 Severity: 3-Major
In a high availability (HA) mirroring configuration, an L7 packet SYN cookie check may be skipped on the standby unit and eventually causes TMM to crash.
TMM crashes on the standby device. No connections shown on the standby unit even when mirroring isenabled.
-- L7 traffic being passed to an HA configuration that is configured for mirroring traffic. -- Failover occurs.
Do not use HA mirroring.
The system now provides SYN cookie checks for L7 mirrored packets on the standby system.