Forum Discussion

Søren_Nielsen's avatar
Oct 03, 2020
Solved

LTM Policy SSL Extension forwarding not working on 15.1 ?

Hi

 

Last night I upgraded a test environment from 14.1 to 15.1 as we want to bump to 15.1 on some of our production F5s.

 

Everything is working fine, except policies we are using as a "SNI router". It has been working fine on 14.1.

 

In more details we have defined several FQDNs for directing traffic to different VIPs.

 

Using:

Condition: SSL Extension - server name - is - any of - FQDN - at - ssl client hello

Matched: Forward traffic - to - virtual server - VIP - at - ssl client hello

 

Traffic is just getting dropped. Thought it could be some schema conversion issue, so tried recreating a new similar policy - same result, just getting a connection reset.

 

Any ideas would be greatly appreciated.

  • Issue found to be a known bug. TLS1.3 does not work with LTM Policy SNI Extension. Forcing TLS1.2 did the trick.