Bug ID 2259617: VDI not compatible with CMP hash destination IP

Last Modified: Apr 21, 2026

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
17.1.2.1, 17.1.2.2, 17.1.3, 17.1.3.1, 17.5.1.5

Opened: Mar 30, 2026

Severity: 4-Minor

Symptoms

- During an RDP access attempt, tmm0 sends a SYN to the RDP server. - The RDP server replies with a SYN-ACK. - The SYN-ACK is received on a different TMM instance, such as tmm1. - The receiving TMM immediately sends a TCP RST. - The RST reason is [F5RST: No local listener] or [F5RST: No flow found for ACK]. - Packet captures show the SYN-ACK is not handled by the same TMM that sent the SYN. - This mismatch causes the RST.

Impact

Unable to reach RDP server through VDI plugin if cmp-hash is dst-ip

Conditions

The output of tmsh list net vlan command shows the VLAN to the VDI server is configured with cmp-hash set to dst-ip instead of default.

Workaround

Reset vlan to cmp-hash default

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips