Bug ID 517451: ICMP unreachable errors may not reset FastL4 connections

Last Modified: Apr 11, 2024

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
10.2.4, 11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.2.1, 11.4.1, 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.6.0 HF5, 11.5.4, 11.4.1 HF10

Opened: Apr 10, 2015

Severity: 3-Major

Symptoms

ICMP unreachable errors do not always reset FastL4 connection

Impact

Behavior mismatch between clientside and serverside connections when using FastL4 proxy.

Conditions

ICMP unreachable error is received by serverside of FastL4 proxy ICMP unreachable error is the result of a non-SYN packet

Workaround

None

Fix Information

ICMP unreachable errors received on serverside handler of FastL4 proxy will generate connection reset.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips