For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

P_Kueppers's avatar
P_Kueppers
Icon for MVP rankMVP
Sep 01, 2022

BigIP ASM Problems with FileUploads with SOAP

Hi there, actually my ASM Policy is blocking a file upload for one application with the error message:   HTTP protocol compliance failed Chunks number exceeds request chunks limit: 1000   I ra...
application delivery
asm
security
xml
AubreyKingF5's avatar
AubreyKingF5
Icon for Moderator rankModerator
Sep 27, 2022

Not a bad plan. Can you show me the tmsh out for the http profile? I take it you're not doing anything fancy like HTTP2?

P_Kueppers's avatar
P_Kueppers
Icon for MVP rankMVP
Sep 30, 2022

Okay I maybe give up. Should I raise a support ticket? I put the iRule Logging on every vserver I think of such uploads but there were only one match in the near of a event log but that cant be a problem:

Sep 30 14:59:22 .dmz.local info tmm1[21243]: Rule /Common/URL_Logging <HTTP_REQUEST>: HTTP Content Length Header = 11019932
Sep 30 14:59:22 .dmz.local info tmm1[21243]: Rule /Common/URL_Logging <HTTP_REQUEST>: HTTP Content Type Header = application/soap+xml; charset=utf-8

 BD_XML|ERR   |Sep 30 15:03:51.849|26888|xml_validation.cpp:0244|Cannot allocate 19503077 more bytes for XML parser. current memory size 1008875463 (in bytes)

And 4 min later;

Broadcast message from systemd-journald@.dmz.local (Fri 2022-09-30 15:03:52 CEST):
perl[26640]: 01310003:0: ASM out of memory error: event code X242 Exceeded maximum memory assigned for XML/JSON processing
2022 Sep 30 15:03:52 .dmz.local perl[26640]: 01310003:0: ASM out of memory error: event code X242 Exceeded maximum memory assigned for XML/JSON processing