Bug ID 672240: iRuleLX (v1) plugins may cause TMM to core if originating flow is terminated before plugin work is complete

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Opened: Jul 03, 2017

Severity: 2-Critical

Related Article: K50091255

Symptoms

- Traffic processing is affected. - Core file may be found in /var/core. - /var/log/ltm may include a message similar to the following: info tmm[19357]: 01220009:6: Pending rule /Common/irule_xxx <ACCESS_POLICY_AGENT_EVENT> aborted for 192.168.104.121:29261 -> 10.40.105.180:443

Impact

Traffic processing is interrupted. Traffic disrupted while tmm restarts.

Conditions

- Traffic passing through the BIG-IP system is processed by an iRule. - iRule makes an RPC call to the iRule LX plugin. - Plugin takes a long time to complete the task. - Originating connection is terminated due to timeout or other external causes. - Plugin completes work but corresponding connection is no longer present.

Workaround

- Ensure timeout settings on protocol profiles are sufficiently long to allow for longer running plugin work. - Ensure plugin code executes within timeout limits.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips