Bug ID 517451: ICMP unreachable errors may not reset FastL4 connections

Last Modified: Jun 30, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
10.2.4, 11.2.1, 11.4.1, 11.5.0, 11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.5.3 HF2, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4

Fixed In:
12.0.0, 11.6.0 HF5, 11.5.4, 11.4.1 HF10

Opened: Apr 10, 2015
Severity: 3-Major

Symptoms

ICMP unreachable errors do not always reset FastL4 connection

Impact

Behavior mismatch between clientside and serverside connections when using FastL4 proxy.

Conditions

ICMP unreachable error is received by serverside of FastL4 proxy ICMP unreachable error is the result of a non-SYN packet

Workaround

None

Fix Information

ICMP unreachable errors received on serverside handler of FastL4 proxy will generate connection reset.

Behavior Change