For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Russell_E_Glaue's avatar
Russell_E_Glaue
Icon for Nimbostratus rankNimbostratus
Feb 18, 2009

iRule to avoide "Invalid action EV_SINK_HEADER during ST_HTTP_EARLY_100CONTINUE" error

We are often getting this error message on out BigIP: 

Feb 18 13:41:37 tmm tmm[1568]: 011f0007:3: http_process_state_early_100continue - Invalid action EV_SINK_HEADER during ST_HTTP_EARLY_100CONTINUE (Server side: vip= profile=http pool=

How can I write an iRule to resolve this error from occurring?

Also, does anyone know what this is? Is it related to the new Extended Validation (EV) SSL Certificates - perhaps the web user's browser is attempting some kind of EV related function?

-RG

application delivery
dev
devops
iRules

2 Replies

  • Russell_E_Glaue's avatar
    Russell_E_Glaue
    Icon for Nimbostratus rankNimbostratus
    Feb 18, 2009

     

    Additionally, I read this post:

     

     

    http://devcentral.f5.com/default.aspx?tabid=53&view=topic&forumid=5&postid=6645

     

     

    Although the error message is not quite the same.

     

     

    Here is our current BigIP version: BIG-IP 9.4.4 Build 65.1 Final
  • spark_86682's avatar
    spark_86682
    Historic F5 Account
    Feb 19, 2009
    In this case, the EV in the error message is short for "event", and does not refer to SSL certificates.

     

     

    The most common way for this to happen is that you have a client issuing a POST to a virtual server with an iRule that attempts to call HTTP::retry from the HTTP_REPONSE event where the server is sending a response without receiving the entire client request.

     

     

    In general, retrying POST methods is not a good idea, so if this is the case for you, then I would alter your iRule accordingly.
Related Content