Last Modified: Apr 16, 2026
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.1.3, 17.1.3.1
Opened: Jul 11, 2025 Severity: 3-Major
On BIG-IP VE in a VMware environment with VMXNET3 paravirtual NICs, RSS does not DAG SCTP traffic correctly.
- The connection fails because the outgoing INIT leaves TMM1, but the return traffic arrives on TMM0. - No connection is matched, so the INIT_ACK goes to the wrong TMM, which responds with "protocol unreachable."
- BIG-IP is deployed in a VMWare based hypervisor with vmxnet3 paravirt nics. - Configure diameter peer with transport as SCTP and auto-init enabled. ltm message-routing diameter peer HSS_peer { auto-initialization enabled pool HSS_Pool transport-config sctp } ltm pool HSS_Pool { members { <pool-member ip>:diameter { address <pool-member ip> } } }
None
None