Bug ID 1154533: Deleting a data-group in use by an iRule does not trigger a validation error when using matchclass

Last Modified: Apr 28, 2025

Affected Product(s):
BIG-IP All(all modules)

Known Affected Versions:
14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 14.1.5, 14.1.5.1, 14.1.5.2, 14.1.5.3, 14.1.5.4, 14.1.5.6

Opened: Sep 13, 2022

Severity: 4-Minor

Symptoms

Log files /var/log/tmm reports an error about invalid matchclass, for example: localhost err tmm[17817]: 01220001:3: TCL error: /Common/gen-snat <CLIENT_ACCEPTED> - invalid matchclass operands - no class or list type found, lhs: ip, rhs: /Common/mydatagroup (line 15) invoked from within "matchclass [IP::local_addr] equals /Common/mydatagroup"

Impact

The in-use data-group can be deleted without error. iRule aborts lead to connection issues.

Conditions

-- Delete a data group. -- iRule with keyword matchclass uses that data-group on a virtual server For example: if { [matchclass [IP::local_addr] equals /Common/mydatagroup] } {

Workaround

Replace obsoleted "matchclass" keyword with "class match"

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips