Bug ID 638799: Per-request policy branch expression evaluation fails

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM, SWG(all modules)

Known Affected Versions:
13.0.0

Fixed In:
13.1.0, 13.0.0 HF1, 12.1.2 HF1

Opened: Jan 12, 2017

Severity: 3-Major

Symptoms

Per-request policy branch expression evaluation fails and you see the following in /var/log/ltm: info tmm[20278]: 01870007:6: /Common/<policy>:Common:640446c9: Executed expression (expr { [mcget {perflow.category_lookup.failure}] == 1 || [mcget {perflow.response_analytics.failure}] == 1 }) from policy item (Category Lookup) with return value (Failed)

Impact

Per-request policy branch expression evaluation fails. If Access gets a request for whitelisted URL, the system disables all iRule events except the following: #define ACCESS_ALLOWED_IRULE_EVENTS ( \ ((UINT64)1 << TCLRULE_ACCESS_SESSION_STARTED) | \ ((UINT64)1 << TCLRULE_ACCESS_SESSION_CLOSED) | \ ((UINT64)1 << TCLRULE_ACCESS_POLICY_AGENT_EVENT) | \ ((UINT64)1 << TCLRULE_ACCESS_POLICY_COMPLETED))

Conditions

Per-request policy branch expression evaluation fails for any non-Access (non-APM) iRule events that are attached to the virtual server. The evaluation does not trigger for some requests when, in the same connection, the virtual server gets a request for an internal Access whitelisted URL, and then request for backend resource URIs.

Workaround

None.

Fix Information

Per-request policy branch expression evaluation now complete successfully for non-Access (non-APM) iRule events that are attached to the virtual server.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips