Loading...
Loading...
On BIG-IP 11.5.x, approximately 50% of TCP connections have all of their packets dropped when hardware syncookies are being issued and certain other features are enabled.
Approximately 50% of connections will have all of their packets dropped when hardware syncookies are being issued.
-- An 11.5.x version of the BIG-IP is in use on the system. -- The platform supports hardware syncookies. -- Hardware syncookies are being issued. -- The sys db TM.TCPProgressive is set to a value other than 'enable'. If the sys db TM.TCPProgressive is set to 'disable' or 'negotiate', the issue occurs when the previous conditions are met, and any one of the following conditions applies to the TCP profile attached to the virtual server: -- MPTCP is enabled. -- Rate pacing is enabled. -- Congestion control is set to vegas, illinois, woodside, chd (Caia-Hamilton Delay based) or cdg (Caia Delay-Gradient).
Any of the following actions will mitigate this issue: 1. Disable hardware syncookies. 2. Set sys db TM.TCPProgressive to 'enable'. 3. If sys db TM.TCPProgressive is set to 'negotiate', set the following options on the TCP profile as follows: a. Disable MPTCP. b. Disable rate pacing. c. Set congestion control to reno, new-reno, high-speed, or scalable.
None
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.