Forum Discussion

Sajin's avatar
Sajin
Icon for Nimbostratus rankNimbostratus
Oct 09, 2020

HTTP response from pool member to client IP is getting blocked by F5 LTM with the status code 0

I have a BiGIP LTM with the version 13.1.3.4 with the engineering hotfix where we disabled HTTP compliance check using the command - 'tmsh modify sys db tmm.http.rfc.enforcement value disable'. However, one of our application is failing due to the HTTP compliance issues.

 

We are observing the HTTP response from pool member to client IP is getting blocked by F5 LTM with the status code 0. Hence, removed HTTP and HTTP-Compression profile as workaround to customer.

 

Can you please help me out with the causes of blocking the traffic here when we have HTTP profile added in VIP?

2 Replies

  • You really need (decrypted) packet captures to see the server response at a packet level to determine what compliance issues may be occurring, and where.

     

     

    • Sajin's avatar
      Sajin
      Icon for Nimbostratus rankNimbostratus

      Hi Simon, Thank you, I was specifically looking if any update happened on HTTP profile on 13.1.3.4 compared to our old version - 12.1.3.3 in F5 release notes as the server is dropping connection even after disabling 'http rfc enforcement value' globally.

       

      I will find a downtime to enable the http profile and packet captures. Can you please help me with the commands that I need to run here?