Bug ID 638570: "ACCESS::session remove" hangs in ACCESS_POLICY_COMPLETED

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.6.1

Fixed In:
13.0.0, 11.6.2

Opened: Jan 11, 2017

Severity: 2-Critical

Symptoms

When "ACCESS:session remove" can hang if it is used within the the ACCESS_POLICY_COMPLETED event. Other commands within the event may not execute.

Impact

ACCESS::session remove cannot be used in the ACCESS_POLICY_COMPLETED event, which may break some use cases. Some Access Exchange iRules are broken from this.

Conditions

when ACCESS_POLICY_COMPLETED { ACCESS::session remove } This iRule was also observed to hang, with the client not receiving the 401 response: when ACCESS_POLICY_COMPLETED { ACCESS::respond 401 content "Error denied..." ACCESS:session remove }

Workaround

None

Fix Information

Processing of "ACCESS::session remove" was reverted to an earlier version that does not exhibit this behavior.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips