Bug ID 603550: Virtual servers that use both FastL4 and HTTP profiles at same time will have incorrect syn cache stats.

Last Modified: Oct 01, 2018

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.5.3 HF2, 11.5.4, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.5.5, 11.5.6, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 11.6.1 HF1, 11.6.1 HF2, 11.6.2, 11.6.2 HF1, 11.6.3, 11.6.3.1, 12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2

Fixed In:
13.0.0, 12.1.2 HF1, 11.6.3.2, 11.5.7

Opened: Jul 07, 2016
Severity: 3-Major
Related AskF5 Article:
K63164073

Symptoms

Virtual server remains in syncookie mode even after the syn flood stops. As a result of this issue, you might see the following symptoms: -- Virtual servers that use both FastL4 and HTTP profiles might show incorrect 'Current SYN Cache' stats. -- Virtual stats 'Current SYN Cache' does not decrease.

Impact

The virtual server stays stuck in syncookie mode after the synflood is over, and does not recover.

Conditions

This issue occurs when the configuration contains a virtual server that uses FastL4 as a filter (for example, has both the FastL4 profile and layer 7 profile (HTTP) syn flood to the virtual server).

Workaround

None.

Fix Information

Virtual servers that use both FastL4 and HTTP profiles will have correct syn cache stats.

Behavior Change