Last Modified: May 29, 2024
Affected Product(s):
BIG-IP APM
Known Affected Versions:
13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 16.0.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2
Fixed In:
16.1.2.2, 15.1.6.1, 14.1.5
Opened: Jan 31, 2020 Severity: 3-Major
HTTP authentication in the access policy times out after 60 seconds, where previously, the timeout was 90 seconds.
HTTP authentication times out 30 seconds earlier than it did in previous versions. There is no way to configure this timeout value, so authentication fails for operations that require greater than 60 seconds to complete.
Encountering the timeout of HTTP authentication in the access policy in this version of the software.
None.
Added options to configure the HTTP connection and request timeouts in HTTP authentication. 1. A db key to configure Connection Timeout for HTTP Server configuration: +[APM.HTTP.ConnectionTimeout] +default=10 +type=integer +min=0 +max=300 +realm=common +scf_config=true +display_name=APM.HTTP.ConnectionTimeout 2. A db key to configure Request Timeout for HTTP Server configuration: +[APM.HTTP.RequestTimeout] +default=60 +type=integer +min=0 +max=600 +realm=common +scf_config=true +display_name=APM.HTTP.RequestTimeout
Added db variables APM.HTTP.ConnectionTimeout and APM.HTTP.RequestTimeout as options to configure the HTTP connection and request timeouts in HTTP authentication. The APM.HTTP.ConnectionTimeout defaults to 10 seconds, and the APM.HTTP.RequestTimeout defaults to 60 seconds. Note: These defaults are the same as the values in earlier releases, so there is no effective functional change in behavior.