Bug ID 757442: A missed SYN cookie check causes crash at the standby TMM in HA mirroring system

Last Modified: Jul 03, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP All(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5, 14.1.0.6

Fixed In:
15.0.0

Opened: Feb 02, 2019
Severity: 3-Major

Symptoms

In a high availability (HA) mirroring configuration, an L7 packet SYN cookie check may be skipped on the standby unit and eventually causes TMM to crash.

Impact

TMM crashes on the standby device. No connections shown on the standby unit even when mirroring isenabled.

Conditions

-- L7 traffic being passed to an HA configuration that is configured for mirroring traffic. -- Failover occurs.

Workaround

Do not use HA mirroring.

Fix Information

The system now provides SYN cookie checks for L7 mirrored packets on the standby system.

Behavior Change