Last Modified: Oct 16, 2026
Affected Product(s):
BIG_IP_NEXT(BNK) BNK
Fixed In:
2.3.3, 2.2.4
Opened: Jul 23, 2026 Severity: 2-Critical
A routing container restart can leave stale NAT kernel routes when the system updates NAT policy mid-restart (for example, during an OOM-triggered restart).
A stale route is invalid or could cause cross-pod BGP route advertisements
Occurs when, - The routing container is restarted - The NAT policy addresses are modified.
Restart the entire Pod, or just tmrouted container.
During reinitialization of the routing daemon a full load sync of routes will occur.