Bug ID 746746: syn-cookies incorrectly enabled in f5.ip_forwarding iApp template

Last Modified: May 23, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP TMOS(all modules)

Fixed In:
15.0.0

Opened: Oct 12, 2018
Severity: 3-Major

Symptoms

The f5.ip_fowarding iApp template disables loose-init and loose-close but does not disable syn-cookie protection in the fastL4 profile, causing traffic degradation.

Impact

Dropped packets.

Conditions

Any deployment of the f5.ip_forwarding template will trigger this issue.

Workaround

Disable app-service strict-updates and then disable syn-cookie-enable on the appropriate fastL4 profile.

Fix Information

SYN cookie protection is now correctly disabled in the fastL4 profile created during deployments of the f5.ip_forwarding iApp template.

Behavior Change