Bug ID 746746: syn-cookies incorrectly enabled in f5.ip_forwarding iApp template

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Fixed In:
15.0.0

Opened: Oct 12, 2018

Severity: 3-Major

Symptoms

The f5.ip_fowarding iApp template disables loose-init and loose-close but does not disable syn-cookie protection in the fastL4 profile, causing traffic degradation.

Impact

Dropped packets.

Conditions

Any deployment of the f5.ip_forwarding template will trigger this issue.

Workaround

Disable app-service strict-updates and then disable syn-cookie-enable on the appropriate fastL4 profile.

Fix Information

SYN cookie protection is now correctly disabled in the fastL4 profile created during deployments of the f5.ip_forwarding iApp template.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips