Bug ID 1104517: In SWG explicit proxy, some TCP connections are reset because of inconsistency between sessionDB and local IP2SessionId map

Last Modified: Jan 06, 2023

Bug Tracker

Affected Product:  See more info
BIG-IP SWG(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1

Opened: May 05, 2022
Severity: 2-Critical

Symptoms

Some clients' TCP connections are reset with an error "cl sm driver error (Illegal value)" when the BIG-IP system is in this error state.

Impact

Some clients are unable to access a service.

Conditions

SWG explicit proxy is configured.

Workaround

Disable sessionDB mirroring on both active and standby # tmsh modify sys db statemirror.mirrorsessions value disable # tmsh save sys config Restart tmm on standby # bigstart restart tmm

Fix Information

None

Behavior Change