Bug ID 493537: Improve handling of slow proxies to the IP reputation database

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
11.4.1, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0

Opened: Nov 30, 2014

Severity: 4-Minor

Symptoms

Connection to an IP reputation proxy times out if the proxy is slow.

Impact

The IP reputation database doesn't get updated or doesn't download at all.

Conditions

The IP reputation server is accessed through a proxy, the iprepd log shows that the connection to the proxy is timed out.

Workaround

Improve the proxy and network settings.

Fix Information

We added a bigdb parameter that defines the connection time out to the ipreputation database in order to allow a configuration of a larger timeout value. The new parameter name is iprep.sockettimeout and its default value is 15.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips