Bug ID 1788105: TLS1.3 connections between BIG-IP and server hangs with an APM policy that is invoked after the server's SSL handshake finishes

Last Modified: Jun 16, 2025

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
17.1.2, 17.1.2.1, 17.1.2.2

Opened: Jan 22, 2025

Severity: 3-Major

Symptoms

A TLS1.3 connection between the BIG-IP system and the server hangs.

Impact

The connection hangs and the client is unable to connect to the server.

Conditions

A virtual server that uses 1. TLS1.3 in the serverSSL profile 2. An APM policy that uses events that trigger after the SSL handshake on the server has completed

Workaround

Apply either of these workarounds 1. Disable TLS1.3 on the serverSSL profile 2. Avoid using events that trigger the policy after the SSL handshake on the server has completed (for example avoid Event Wait and L7 protocol Lookup)

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips