Rene_Bader_1308
Jul 24, 2014Nimbostratus
Issue with LTM profile http after upgrade to 11.5.1HF3
All,
after upgrading to TMOS 11.5.1 HF3 we're facing a lot of error messages like:
HTTP profile option passthrough.oversize_server_headers incompatible with proxy_type. (and)
http_process_state_prepend - Invalid action:0x109010 (Server side: vip=/Common/virtual_server profile=http pool=/Common/Pool_virtualserver server_ip=x.x.x.x) in the LTM logs.
In addition I have the problem that connections (in this case we're load balancing two proxy servers) where droped, but only if they are SSL connections requiring user authentication on the proxy servers.
Standard http session with/without authentication and SSL connections without authentication work like expected.
I already started to ingrease the max. HTTP header size but that didn't helped.
At the end I had to remove the profile from the virtual server and everything is up and running now.
For the system:
We're only using LTM.
The LTM profile is:
ltm profile http /Common/http_proxy_xff {
app-service none
defaults-from /Common/http
enforcement {
max-header-size 35000
unknown-method allow
}
insert-xforwarded-for enabled
proxy-type reverse
}
How can I fix this issue as we would need the profile, esp. the XFF settings?
Thanks
René