Bug ID 944121: Missing SNI information when using non-default domain https monitor running in TMM mode.

Last Modified: Apr 21, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 16.0.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2, 16.1.0, 16.1.1, 16.1.2, 16.1.2.1

Fixed In:
16.1.2.2, 15.1.5.1, 14.1.4.6, 13.1.5

Opened: Sep 11, 2020
Severity: 3-Major

Symptoms

In-TMM https monitors do not send the SNI (Server Name Indication) information for non-default route domain pool members. In-TMM monitors do not send any packet when TLS1.3 monitor is used.

Impact

The TLS connection might fail in case of SNI No SYN packet is sent in case of TLS1.3 monitor

Conditions

-- SNI is configured in serverssl profile -- serverssl profile is assigned to in-tmm https monitors -- https monitors are monitoring pool members that are in a non-default route domain. - Another Condition : TLS1.3 Monitor is used

Workaround

N/A

Fix Information

N/A

Behavior Change