Forum Discussion

T5C's avatar
T5C
Icon for Altocumulus rankAltocumulus
Oct 10, 2022
Solved

BIGIP resets connecion

Hello Team How to check what's the reason for resetting connection from F5  in this situation:  F5  receives from server 'application/octet-stream' http first packet, acknoledges it and then sends r...
  • Mohamed_Salah_'s avatar
    Oct 11, 2022

    Hello,

    what great news, that it is working now. I think you can extract the headers and value pairs and check them by yourself and compare header names and values with RFC.

    For example, the following HTTP request from the client causes the connection to be reset:

    POST /web/page HTTP/1.1
    Accept: */*
    aaabbbccc
    Cache-Control: no-cache
    Content-Length: 438

    Note: The aaabbbccc header is malformed because it does not conform to the name: value syntax. 

    Using another example, the following HTTP request from the client also causes the connection to be reset:

    POST /web/page HTTP/1.1
    Accept: */*
    aaabbbccc :
    Cache-Control: no-cache
    Content-Length: 438

    Note: If there is a white space between the field name (aaabbbccc) and colon (:), then the request fails and the system considers it to be malformed. Full details about HTTP header restrictions are described in IETF RFC 7230: Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing.This link takes you to a resource outside of AskF5, and it is possible that the document may be removed without our knowledge.

    Reference: https://support.f5.com/csp/article/K38905534

     

    Unfortunately, it is not mentioned in any of F5 articles how to check for the malformed header and know the header specifically, so you can check it by yourself by getting all of the header names and values.

    BR,

    Mohamed Salah