For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Vinne73's avatar
Vinne73
Icon for Cirrus rankCirrus
Sep 25, 2018

Chrome prefetch breaks APM sessions?

Hi,   We use Big-IP APM as a SAML SP for Shibboleth IdP. Our APM Policy is nothing too fancy. It's a multi-domain SSO.   The problem: we see a lot of /my.logout.php3?errorcode=21 in /var/log/lt...
BIG-IP Access Policy Manager (APM)
devops
saml
Michel_Humphrey's avatar
Michel_Humphrey
Icon for Nimbostratus rankNimbostratus
Sep 27, 2018

Thanks .. this fixed it for us !

 

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Sep 27, 2018

    Thanks for the feedback. does it fix the same requirement (Purpose header with prefetch value) or is it a similar requirement base on other criteria?

     

  • Michel_Humphrey's avatar
    Michel_Humphrey
    Icon for Nimbostratus rankNimbostratus
    Sep 27, 2018

    we were getting sporadic /my.logout.php3?errorcode=21. errors and this only on chrome .. version 69. Errors were accompanied of unexplained Null values in session variables that should of been populated..

     

    after reading description of issues in this thread.. we figured that multiple queries might be happening for us too .. and parralell queries might the ones without populated variables.. hence the errors.. by essentially "killing" parallele querie.. it seemed to have fixed our issue. And as an unexpected result ... now our access policy also seems to run alot faster.. "snappier" .. i'm sure F5 code is ready for all new chrome features....

     

    i want t osatte this conclusion is in no way scientific .. or by any means technically backed by anything but .. it did'nt work cleanly before the additionnal Irule code .. and now its predictable and snappy.

     

    We did not go into traffic analysis to a level of waht is highlighted in Vinne73 post ..