Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10
Fixed In:
11.6.0
Opened: Oct 31, 2013 Severity: 3-Major Related Article:
K17068
Switch to SSL forward proxy bypass does not abort all of the modules between SSL and TCP-PROXY, which might result in an unexpected TMM crash.
Calling 'HTTP::disable' on different events may cause TMM to crash.
SSL forward proxy bypasses traffic and HTTP::disable is called on various events.
Disable HTTP profile in SERVER_CONNECTED: when SERVER_CONNECTED { HTTP::disable }
SSL forward proxy now supports policy based bypass. When it converts to bypass mode, SSL forward proxy automatically abort all modules/profiles in between TCP-PROXY and SSL. Calling HTTP::disable on events is not needed.
When SSL forward proxy converts to bypass mode, it aborts all the modules between itself and tcp proxy. This includes abort the http module. Calling 'HTTP::disable' for SSL forward proxy bypass is not needed.