Bug ID 758311: Policy Compilation may cause MCPD to crash

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5

Fixed In:
15.0.0, 14.1.0.6

Opened: Feb 10, 2019

Severity: 3-Major

Symptoms

If a policy has rules involving IPv6 addresses, and the addresses differ only on 32-bit boundaries, then the compilation of that policy may cause MPCD to crash.

Impact

MCPD cores, and then restarts. The policy is not usable.

Conditions

-- A policy is attached to a virtual server. -- That policy contains conditions that involve IPv6 addresses. -- The addresses in different rules differ only on 32-bit boundaries.

Workaround

You can try either of the following: -- It may be possible to create multiple rules from a given rule by altering the netmask. -- Another possibility is to add a placeholder rule with no action that matches IP addresses differently.

Fix Information

Policies involving matching IP addresses now compile correctly.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips