Bug ID 620556: Fragmented packets on clone pool for L7 virtual server targeting another L7 virtual server through iRule

Last Modified: Dec 07, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Opened: Oct 04, 2016

Severity: 3-Major

Symptoms

Fragmented packets may be transmited to clone pool members of virtual server, which is also forwarding its traffic to another virtual server.

Impact

Fragmented packet are transmitted to pool members, which affects performance and may trigger some intrusion detection systems.

Conditions

One virtual server should be configured to forward traffic to another one using iRule, i. e. when CLIENT_ACCEPTED { virtual another_virtual } This forwarding virtual should also have clone pool configured.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips