For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chris_Phillips's avatar
Chris_Phillips
Icon for Nimbostratus rankNimbostratus
Jul 04, 2014

Where is a large HTTP POST buffered to in an LTM / ASM system?

Hi,   If I look to upload a 50mb document through an ASM enabled httpclass, I see all 50mb enter the box (tcpdump / chrome developer tools). I see nothing at all come out to a pool member. the ASM...
application delivery
ASM Advanced WAF
design
LTM
security
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Jul 04, 2014

Hi,

 

There is some restriction for file upload through webapp protected by ASM.

 

As far as I remember you can extend the buffer capabilities to 30Mb max.

 

I suggest to disable ASM for your Virtual Server when POST multi-part is detected and Content-Length header value exceed 30Mb.

 

BR

 

Yann

 

Chris_Phillips's avatar
Chris_Phillips
Icon for Nimbostratus rankNimbostratus
Jul 04, 2014
It's 20mb on 10.2.4, and I'm expecting to have to do something along these lines, but I'm currently looking to clarify what's going on in this situation.