Bug ID 434258: SSL Forward Proxy versions prior to 11.6.0 do not fully support passthrough.

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.0, 11.5.1

Fixed In:
11.6.0, 11.5.2

Opened: Oct 16, 2013

Severity: 2-Critical

Related Article: K16360

Symptoms

SSL Forward Proxy versions prior to 11.6.0 do not fully support passthrough. When upper layer profiles such as HTTP is configured, packet passthrough will not work.

Impact

The TMM crashed.

Conditions

HTTP profile and/or other modules above SSL are configured and SSL bypass is enabled.

Workaround

None

Fix Information

When SSL Forward Proxy decides to convert itself to passthrough mode (no re-encryption and re-decryption of traffic), it will automatically abort all modules above it.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips