For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

invisible's avatar
invisible
Icon for Nimbostratus rankNimbostratus
Oct 23, 2019

Bug ID 750661: URI translation rules defined in Rewrite profile with type 'uri-translation' are not applied

This bug is still presented at 15.0.1   What is the safest version we can roll back where this bug is NOT present instead of being 'fixed?   Thanks
application delivery
BIG-IP
LTM
Nathan_F__F5_'s avatar
Nathan_F__F5_
Icon for Employee rankEmployee
Oct 29, 2019

Hi invisible,

 

That bug is supposed to fixed in v15.0.0 and should subsequently still be fixed in v15.0.1 as well. That said, if you are still being affected by that bug then I would recommend that you please open a support ticket to take a closer look. With that we would be able to review the bug and ensure that it is indeed a match for that bug and try to determine if it is a regression of that bug. It's also possible that it's not the same bug but some other similar bug that has yet to be identified.

 

Bug ID 750661: URI translation rules defined in Rewrite profile with type 'uri-translation' are not applied.

https://cdn.f5.com/product/bugtracker/ID750661.html

 

Alternatively, if you would rather try to downgrade the device instead then you could try v14.0.1.1. From what I can tell the bug was introduced in v14.1.0 so I don't think that v14.0.x would be affected. However, I have not personally tested that bug on v14.0.1.1 so I can't say for sure if it would be affected or not.

 

-Nathan F

invisible's avatar
invisible
Icon for Nimbostratus rankNimbostratus
Nov 05, 2019

Nathan,

 

Apparently there is not just that particular bug here because the rewrite profile in our case does not work at all.

 

Over last several days I've learned that:

  • There is no way to downgrade from newer version of F5's code to older version. Period. My attempt to do it via UCS file or via SCF failed. With UCS I got message that it is not possible to downgrade from 15.0 to 14.1 and with SCF, even after hours of manually editing it trying to remove newer schema elements, I had to give up because decryption failed.
  • Even when I restored a backup (we are running VE instances, so we keep VM backups) back from 2017 running 12.1 code, when I defined rewrite profile, I got the same result - URI was not overwritten
  • I could not find a way to debug/log what F5 actually is doing when it rewrites contents/requests.

 

Do you have anything to comment regarding above?

 

The situation with rewrite profile is weird because I do remember that back several years ago, when running 12.x code it did work. Then we did not need it for a while and now, when needed again, it does not work.

 

Is there a way to debug invocation/action of rewrite profile in form of log? Like it writes - 'request from www.abc.com has been rewritten to www.xyz.com and sent to the node nnn.local?

 

Thanks