Loading...
Loading...
In BIG-IP v12.0.0 hf1 and hf2 hardware syn cookie feature for L7 (e.g. Standard Virtual Server type or FastL4 with http profile) virtual server is broken due to HSB bitstream update with a new hardware syn cookie algorithm. It does not impact 12.0.0 base release.
When syncookie protection is triggered, ingress legitimate traffic may be dropped by BIG-IP.
Hardware syn cookie is enabled (which is the default setting) on L7 virtual server.
Disable hardware syn cookie on L7 virtual servers. Note: After this workaround you may encounter Bug ID 555020 SW syncookies and windowscaling will cause 3WHS to fail on L7 VIP in which case you would need to apply the workaround from that as well.
This bug is fixed in 12.0.0-hf3 and 12.1.0.
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.