Loading...
Loading...
Traffic is supposed to be routed to virtual servers based on which ever one has the best (i.e. most specific) match to the incoming traffic using destination address/port and source address (see https://support.f5.com/csp/article/K14800). But this does not always work correctly, e.g. when two virtual servers use destination port any.
Traffic is routed to the wrong virtual server.
Here's an example where this is a problem: 1) Two virtual servers with the same destination address both using port any. 2) One server uses a wildcard source address and one a specific address. For instance: ltm virtual test1 { destination 10.93.19.5:any ip-protocol tcp mask 255.255.255.255 pool pool1 profiles { tcp { } } serverssl-use-sni disabled source 0.0.0.0/0 source-address-translation { type automap } translate-address enabled translate-port disabled vs-index 2 } ltm virtual test2 { destination 10.93.19.5:any ip-protocol tcp mask 255.255.255.255 pool pool1 profiles { tcp { } } serverssl-use-sni disabled source 10.93.19.2/32 source-address-translation { type automap } translate-address enabled translate-port disabled vs-index 3 } Traffic from 10.93.19.2 will be incorrectly routed to the test1 server.
Avoid multiple virtual servers with the same destination address and port any.
N/A
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.