Bug ID 852157: Previously deployed SSL Orchestrator topology may cause deployment failures.

Last Modified: Sep 14, 2023

Affected Product(s):
BIG-IP SSLO(all modules)

Known Affected Versions:
14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 14.1.5, 14.1.5.1, 14.1.5.2, 14.1.5.3, 14.1.5.4, 14.1.5.6

Opened: Nov 22, 2019

Severity: 2-Critical

Symptoms

SSL Orchestrator may fail to deploy or redeploy topologies with the following error: "Error: transaction failed:01020066:3: The requested iRule (/Common/ssloGS_global.app/ssloGS_global-settings) already exists in partition Common."

Impact

SSL Orchestrator will fail to deploy or re-deploy if either device in the failover device-group still has ssloGS_global-settings iRule in configuration.

Conditions

During an SSL Orchestrator delete operation, not all of the configuration is being removed from both devices within a failover device-group.

Workaround

This workaround will force rebuilding and deploying all previously associated SSL Orchestrator topologies. Run the clear-rest-storage command line tool to remove restful shared references, and then from tmsh delete sys application service ssloGS_global.app/ssloGS_global and any associated application services. Rebuild and deploy the topologies using the SSL Orchestrator GUI.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips