03-Oct-2020 00:14
Hi
Last night I upgraded a test environment from 14.1 to 15.1 as we want to bump to 15.1 on some of our production F5s.
Everything is working fine, except policies we are using as a "SNI router". It has been working fine on 14.1.
In more details we have defined several FQDNs for directing traffic to different VIPs.
Using:
Condition: SSL Extension - server name - is - any of - FQDN - at - ssl client hello
Matched: Forward traffic - to - virtual server - VIP - at - ssl client hello
Traffic is just getting dropped. Thought it could be some schema conversion issue, so tried recreating a new similar policy - same result, just getting a connection reset.
Any ideas would be greatly appreciated.
Solved! Go to Solution.
05-Oct-2020 06:20
Issue found to be a known bug. TLS1.3 does not work with LTM Policy SNI Extension. Forcing TLS1.2 did the trick.
05-Oct-2020 06:20
Issue found to be a known bug. TLS1.3 does not work with LTM Policy SNI Extension. Forcing TLS1.2 did the trick.