Symptoms

There are two issues related to default rules (rules without any conditions) in an LTM policy. If a default rule is the only rule in a policy, the actions may be executed more than once. In some cases this is harmless, in other cases (such as http-reply), the second execution fails with an error message. If a default rule has both request and response actions, only the response actions are executed.

Impact

In some cases, not all actions in the default rule are executed; in other cases, an action in the default rule may be executed more than once.

Conditions

This affects virtual servers with an LTM policy that consists of either a default rule only, or a default rule with both request and response actions.

Workaround

To a policy with only a default rule, add a condition to that rule. Adding the condition 'http-uri starts-with values { / }' always matches and would keep the rule acting as a default rule. To a policy that has default rules with actions in both request and response, you can split the rule into two default rules: one with the request action and the other with the response action.

Fix Information

Policies with only a default rule no longer have some actions executed more than once. Policies with a default rule that has both request and response action now have all those actions executed at the right time.

Behavior Change