For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

eirikn's avatar
eirikn
Icon for Nimbostratus rankNimbostratus
Apr 28, 2015

Updating Big-IP 11.5.0 to 11.6.0 HTTP profile error

Hi!

I recently updated a stand alone staging (QA) Big-IP unit from 11.5.0 to 11.6.0. The following errors appears in the ltm log after patching:

Apr 23 22:49:02 xxxxhostname warning tmm[9952]: 011f0012:4: HTTP profile option passthrough.excess_client_headers incompatible with proxy_type.  Using default instead.

Apr 23 22:49:02 xxxxhostname warning tmm1[9952]: 011f0012:4: HTTP profile option passthrough.excess_server_headers incompatible with proxy_type.  Using default instead

I've read on devcentral that this might be due to a bug?

Im doing the same update on the production environment (HA) soon and I'm a bit scared that this might break something. Are there any workarounds, or should I ignore the error?

Is there anything else that I should keep in mind when upgrading from 11.5.0 to 11.6.0?

BR

application delivery
availability
LTM
management
TMSH

2 Replies

  • Cory_12946's avatar
    Cory_12946
    Historic F5 Account
    Apr 28, 2015

    There is a bug on it but from some reason it didn't published. bug id 446887. The workaround is: tmsh modify sys db log.http.level value Error

     

  • sfuerst_116779's avatar
    sfuerst_116779
    Historic F5 Account
    Apr 30, 2015

    The passthrough options are incompatible with the default (Reverse) HTTP proxy type. You'll need to use a HTTP Transparent proxy to turn them on.

     

    Somehow, your configuration has these flags turned on for the wrong proxy type. The BigIP is warning that they are being ignored, and the default (reject) is being used.