For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jyulkbox_48590's avatar
jyulkbox_48590
Icon for Nimbostratus rankNimbostratus
Jul 20, 2010

SIP bug? Comma-separated Via header

Hello,

 

 

I noticed that Big IP removes the Via header entirely if the Via header is a comma-separated line of multiple Via headers.

 

 

For example,

 

 

Via: SIP/2.0/UDP bigip.f5.com:5060;branch=fffeeeddd, SIP/2.0/UDP appserver.f5.com:38495;branch=aaabbbccc

 

 

is a comma-separated Via header which is equivalent to

 

 

Via: SIP/2.0/UDP bigip.f5.com:5060;branch=fffeeeddd

 

Via: SIP/2.0/UDP appserver.f5.com:38495;branch=aaabbbccc

 

 

Big IP should only remove the top-most value.

 

But when it's in a single line, Big IP removes the entire line.

 

 

This happens when

 

1) you add a SIP profile to a virtual server and check "Insert Via header".

 

2) use a JAIN SIP based client. (JAIN SIP concatenates Via headers into one line.)

 

3) send a SIP request message (INVITE in my case) out from internal app server to the client outside.

 

(but I imagine that any UAC inside, UAS outside scenario would be able to reproduce this behavior.)

 

 

Thank you,

 

Jong Yul

 

config
design

1 Reply

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jul 21, 2010
    Hi Jong Yul,

     

     

    This does look like it could be a bug. I would suggest opening a case with F5 Support to report the issue. They'll be able to test the issue with you. In the meantime, you could disable the 'Insert SIP VIA header' option and use an iRule with 'SIP::header insert' to manually insert this:

     

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/sip__header

     

     

    Aaron