Bug ID 639349: LTM 11.6.1 - Weblogic iApp inserts WL-Proxy-Client-IP header with route domain

Last Modified: Mar 21, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 11.6.1 HF1, 11.6.1 HF2, 11.6.2, 11.6.2 HF1, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4

Fixed In:
13.1.0

Opened: Jan 14, 2017
Severity: 4-Minor

Symptoms

iApp incorrectly uses the entire IP address string, including route domain [IP::client_addr], when constructing the WL-ProxyClient-IP header via an iRule. Route domain suffix should be stripped.

Impact

Weblogic servers fail to parse the packet header.

Conditions

This occurs if you add a route domain to incoming client traffic and deploy the f5.bea_weblogic iApp template.

Workaround

Modify the irule to use [getfield [IP::client_addr] "%" 1]

Fix Information

Fix builds the correct irule for handling route domains in Weblogic deployments.

Behavior Change