Bug ID 1328217: SSL Orchestrator may fail to finish upgrading from SSL Orchestratorv9.1 or SSL Orchestratorv9.2 if tcp profile exists with name that starts with sslo_ and ends with -tcp-lan

Last Modified: Jun 28, 2025

Affected Product(s):
BIG-IP Install/Upgrade, SSLO(all modules)

Known Affected Versions:
16.0.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2, 16.1.0, 16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3, 16.1.5, 16.1.5.1, 16.1.5.2, 16.1.6, 17.0.0, 17.0.0.1, 17.0.0.2, 17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2

Opened: Aug 07, 2023

Severity: 4-Minor

Symptoms

Upgrade fails and GUI gets stuck with error message: "Upgrading SSL Orchestrator configuration/s. Any configuration changes are not allowed till upgrade process is finished"

Impact

The upgrade gets stuck, and you are unable to make any SSL Orchestrator changes until the issue has been resolved.

Conditions

Upgrading from SSL Orchestratorv9.1 or 9.2 with a tcp profile that has the following conditions: 1. Has a name that starts with sslo_ 2. Has a name that ends with -tcp-lan 3. Has either: a. Minimum RTO: 250 b. Nagle's Algorithm: Disabled c. Slow Start: Disabled 4. It is not part of an iApp

Workaround

Delete the tcp profile with the above conditions. Change the tcp profile values a. Minimum RTO: 200 b. Nagle's Algorithm: Auto c. Slow Start: Enabled

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips