For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

HenryX_171845's avatar
HenryX_171845
Icon for Nimbostratus rankNimbostratus
Sep 26, 2014

Problem of TCP editing in BIG-IP VE

I'm running AWS m3.large instance of VE: BIG-IP 11.5.1 Build 0.4.110 Engineering Hotfix.   It is okay to run HTTP::header insert in iRule, but TCP::option set, or TCP::payload replace, ... always ...
henryshaw_16675's avatar
henryshaw_16675
Icon for Nimbostratus rankNimbostratus
Sep 26, 2014

Yes, I had seen http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ve-unsupported-features-matrix-1-0-0.html But there isn't anything specific to me.

 

I'm not confident that VE could do "TCP::option set ..." without an upgrade of BIG-IP VE. If that is correct, would F5 provide an VE upgrade (with driver) to address this?

 

Secondly I managed to use "TCP::payload replace 0 0 <...>" inserting content right after TCP header, but unexpectedly in the stream received by client (direction: server=>bigip=>client), I was using SERVER_CONNECTED event simply as:

 

when SERVER_CONNECTED { TCP::payload replace 0 0 "deadbeef" TCP::release }

 

But I meant to insert content to server.

 

Thanks!