For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Todd_02_140890's avatar
Todd_02_140890
Icon for Nimbostratus rankNimbostratus
Jul 19, 2017

Adding new Rule breaks my LTM Policy.

Adding a new rule to my LTM Forwarding Policy, breaks the Policy.   We are running 11.5.x (I know its old) but when I add a new rule to my forwarding policy, it breaks the policy and routes all tr...
application delivery
BIG-IP
LTM
Patrik_Jonsson's avatar
Patrik_Jonsson
Icon for MVP rankMVP
Jul 24, 2017

If policies works the same way as iRules they would not be updated for existing sessions. When you disassociate the rule from the virtual server it might break the existing sessions and force clients to create new ones.

You could test this theory by updating the policy and try to test the rule in private mode on your browser, or try a different browser altogether.

If the theory is confirmed you can kill the connections manually instead of removing/re-adding the policy by running:

tmsh del sys connection cs-server-addr  cs-server-port

This is much faster than what you do today.

/Patrik