Symptoms

If the first request for a session is a POST, APM will save the POST to replay after the policy completes. When the POST is restored after policy completion and released to the backend, the headers are the same as the most recent client request, not the original POST. In particular, the Content-Length header will not match the original POST.

Impact

Backend servers may complain of an incomplete HTTP POST due to a mismatching Content-Length header.

Conditions

First request for the session is a POST.

Workaround

None.

Fix Information

Now, the system takes all headers from the original POST, except the Authorization header that Kerberos RBA needs, which is taken from the most recent client request.

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips