Symptoms

The f5.ip_fowarding iApp template disables loose-init and loose-close but does not disable syn-cookie protection in the fastL4 profile, causing traffic degradation.

Impact

Dropped packets.

Conditions

Any deployment of the f5.ip_forwarding template will trigger this issue.

Workaround

Disable app-service strict-updates and then disable syn-cookie-enable on the appropriate fastL4 profile.

Fix Information

SYN cookie protection is now correctly disabled in the fastL4 profile created during deployments of the f5.ip_forwarding iApp template.

Behavior Change