Bug ID 434258: SSL Forward Proxy versions prior to 11.6.0 do not fully support passthrough.

Last Modified: Feb 13, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.0, 11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9

Fixed In:
11.6.0, 11.5.2

Opened: Oct 16, 2013
Severity: 2-Critical
Related AskF5 Article:
K16360

Symptoms

SSL Forward Proxy versions prior to 11.6.0 do not fully support passthrough. When upper layer profiles such as HTTP is configured, packet passthrough will not work.

Impact

The TMM crashed.

Conditions

HTTP profile and/or other modules above SSL are configured and SSL bypass is enabled.

Workaround

None

Fix Information

When SSL Forward Proxy decides to convert itself to passthrough mode (no re-encryption and re-decryption of traffic), it will automatically abort all modules above it.

Behavior Change