Bug ID 1116813: Some of the valid connections may get rejected in HW SYN cookie mode

Last Modified: Jun 13, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
13.1.5,, 14.1.5,,,,,,, 15.1.6,, 15.1.7, 15.1.8,,

Fixed In:
17.1.0, 15.1.9

Opened: Jun 17, 2022

Severity: 3-Major


Due to algorithm mismatch in software and hardware, valid TCP connections may get rejected with "No flow found for ACK' reset-cause while HW SYN cookie mode is active.


Service degradation.


In vCMP environment either the host or the guest is installed with an affected version.


Disable HW SYN cookie globally on the guest.

Fix Information

SYN cookie hash algorithm is correctly selected on vCMP guests.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips