Bug ID 719241: Using custom DNS servers on the Azure VNet with missing virtual public address causes Waagent provisioning failure

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP BIG-IQ, MA-VE(all modules)

Known Affected Versions:
12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Opened: May 09, 2018

Severity: 4-Minor

Symptoms

During the BIG-IP or BIG-IQ system boot-up, Waagent is unable to get a response from the intended wire server endpoint, which stops it from running custom script extensions. This happens because of the missing route to the Azure virtual public IP address of 168.63.129.16. The var/log/waagent.log contains error messages similar to the following: -- INFO Protocol endpoint not found: WireProtocol, [ProtocolError] [Wireserver Exception] [HttpError] [HTTP Failed] GET http://n.n.n.n,n.n.n.n/?comp=versions -- IOError [Errno -3] Temporary failure in name resolution -- 6 attempts made

Impact

Waagent custom script extensions do not complete, failing the BIG-IP or BIG-IQ provisioning that Waagent intends to perform during startup.

Conditions

-- BIG-IP or BIG-IQ system is deployed in Azure VNet with a custom DNS server. -- The DHCP server has assigned a classless-static-route in its dhclient lease (/var/lib/dhclient/dhclient.leases) which contains a custom route to 168.63.129.16.

Workaround

Add 168.63.129.16 route on mgmt interface during BIG-IP or BIG-IQ system initialization to facilitate correct Waagent custom script extension execution.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips