Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
17.0.0, 16.1.0, 16.0.1.1, 16.0.1, 15.1.3, 15.1.2, 14.1.4.2, 14.1.4.1, 14.1.4, 14.1.3.1, 13.1.4, 13.1.3.6, 12.1.6, 12.1.5.3, 12.1.5.2
Fixed In:
16.1.0, 15.1.5.1, 14.1.4.5, 13.1.5
Opened: Apr 28, 2021 Severity: 3-Major
An ephemeral pool member may not created if the FQDN name resolves to a new IP address that matches an existing statically-configured node. When this occurs, a message like the following appears in the LTM log: err mcpd[4498]: 01070734:3: Configuration error: node (/Common/_auto_10.10.120.12) not found. Note that the node name in the message is the expected name of an ephemeral node created for this address, not the actual name of the statically-configured node with that IP address.
An ephemeral pool member is not created for the IP address newly included in the DNS query result. This results in traffic not being load-balanced to all of the expected pool members.
This may occur if: -- The FQDN node and pool member are created with the "autopopulate enabled" option. -- The FQDN name resolves to more than one IP address. -- One of these IP addresses was not included in the previous DNS query result. -- There is a statically-configured node with the same IP address.
Use one of the following methods to prevent this issue from occurring: -- Avoid creating statically-configured nodes using the same IP addresses returned by resolution of configured node/pool member FQDN names. -- Configure the FQDN pool member with "autopopulate disabled" (default), which creates only a single ephemeral pool member. Perform this sequence of actions to recover from an occurrence of this issue: 1. Remove any pool members referencing the conflicting IP address(es) from their respective pool(s). 2. Delete the statically-configured node(s) using the conflicting IP address(es). 3. Add any pool members referencing the conflicting IP address(es) back to their respective pool(s).
Ephemeral pool members are successfully created when the corresponding FQDN name resolves to one or more new IP addresses that conflict with statically-configured nodes.