Bug ID 883529: HTTP/2 Method OPTIONS allows '*' (asterisk) as an only value for :path

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5

Fixed In:
16.0.0, 15.1.1

Opened: Feb 21, 2020

Severity: 3-Major

Symptoms

HTTP/2 request is not forwarded and RST_STREAM with PROTOCOL_ERROR is sent back to the client.

Impact

HTTP/2 request with Method OPTIONS is limited to :path '*' only. Any other URIs are not forwarded to the server but are rejected with RST_STREAM with PROTOCOL_ERROR.

Conditions

HTTP/2 request with method OPTIONS and pseudo header :path value equal to something other than '*' (asterisk).

Workaround

None.

Fix Information

HTTP/2 request with Method OPTIONS now allows the URI to be something other than '*'. This request is not rejected, but is forwarded to the server.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips