Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1
Fixed In:
13.1.0
Opened: Nov 15, 2016 Severity: 3-Major
Using 'hitless upgrade' (Traffic Intelligence :: Classification :: Signature Update :: Check for updates, or the tmsh command, tmsh list ltm classification signature-version) does not provide sufficient information in messages to indicate success or enable debugging of failure, nor do messages report the installed version of libcec.so. The system does not report the installed version of libcec, the classification library for PEM, in GUI or tmsh. The output shows the date that it last updated, but doesn't report the version of the library that it updated to.
There are no errors displayed in the GUI (or in tmsh). The only failure information available exists in /var/log/hitless_upgrade.log: update_dpi_sigfile.pl|DEBUG|Nov 01 20:39:33.305|19694|F5::DPI::Sigfile::AutoDownload::call_soap_server,,Timestamp: 2016-10-19 11:25:00, BigIP: 12.1.0 update_dpi_sigfile.pl|INFO|Nov 01 20:39:34.562|19694|F5::Sigfile::Update::update,,The most recent DPI Signatures file is already installed. This problem occurs because the decision on whether to to update is based on classification signature-version :: last-update-datetime, which is stored in the config, survives an upgrade, and is not tightly bound to the actual datetime of libcec on disk.
-- A BIG-IP system that was previously updated to a non-default libcec.so, for example, using 'hitless upgrade' (Traffic Intelligence / Classification / Signature Update / Check for updates). -- Upgrade the software. This reverts libcec.so to the original ISO distribution, as libcec is not part of the UCS file. -- Attempt to upgrade libcec again. The system responds as if the latest version is already running, despite it not existing on disk.
Before performing hitless upgrade, click 'Reset to Defaults' (under Traffic-Intelligence / Classification / Signature Update). This deletes the classification_signature_version object, which allows the hitless upgrade operation to succeed.
The system now reports the installed version of libcec, the classification library for PEM in response to the following command: tmsh list ltm classification signature-version.