Bug ID 760370: MRF SIP ALG with SNAT: Next active ingress queue filling

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3

Fixed In:
15.1.0, 15.0.1.4, 14.1.0.6, 14.0.1.1

Opened: Mar 04, 2019

Severity: 3-Major

Symptoms

When running MRF SIP ALG with SNAT, the ingress queue may fill, causing messages to be dropped on the next-active device.

Impact

Mirroring state is lost for the connection.

Conditions

-- The active device determines that an operation can be skipped because the details are already discovered processing a previous message. -- The next-active device has not yet processed the previous message and is not able to skip the operation.

Workaround

None.

Fix Information

When the connection is mirrored, the processing operation is not skipped on either the active or next-active device.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips