Bug ID 638570: "ACCESS::session remove" hangs in ACCESS_POLICY_COMPLETED

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 11.6.1 HF1, 11.6.1 HF2

Fixed In:
13.0.0, 11.6.2

Opened: Jan 11, 2017
Severity: 2-Critical

Symptoms

When "ACCESS:session remove" can hang if it is used within the the ACCESS_POLICY_COMPLETED event. Other commands within the event may not execute.

Impact

ACCESS::session remove cannot be used in the ACCESS_POLICY_COMPLETED event, which may break some use cases. Some Access Exchange iRules are broken from this.

Conditions

when ACCESS_POLICY_COMPLETED { ACCESS::session remove } This iRule was also observed to hang, with the client not receiving the 401 response: when ACCESS_POLICY_COMPLETED { ACCESS::respond 401 content "Error denied..." ACCESS:session remove }

Workaround

None

Fix Information

Processing of "ACCESS::session remove" was reverted to an earlier version that does not exhibit this behavior.

Behavior Change