TMS Cryptography Pack V126.96.36.199 !!INSTALL!! Full Source
Fix:BIG-IP now fully implements draft-thomson-quic-bit-grease-00, an optional extension that allows the second bit in each QUIC packet to be a random value instead of always '1', if the client requests it.
TMS Cryptography Pack V188.8.131.52 Full Source
Behavior Change:BIG-IP now fully implements draft-thomson-quic-bit-grease-00, an optional extension that allows the second bit in each QUIC packet to be a random value instead of always '1', if the client requests it.This should have no impact on endpoints, but it will help to preserve future extensibility of the protocol.If users wish to disable this function, they can set the db variable quic.bit.grease to 'disable'. When disabled, BIG-IP will neither advertise the ability to accept values other than '1', nor will it send values other than '1'. It will reject packets that set it to '0'.The reasons to disable would be that (1) something in the path is dropping packets with the greased bit, or (2) future evaluation of the draft shows that this in some way introduces a security or preformance regression.
Symptoms:There is an issue with the script used for the Traffic Intelligence (CEC (Classification Engine Core)) Hitless Upgrade that misses installing on some blades during install/deploy on VIPRION systems.Symptoms include:-- POST error in the GUI.-- Automatic classification updates are downloaded successfully, but downloaded packages disappear after some time if you do not proceed to install/deploy.
Symptoms:Tmm is running at 100% CPU even under light network load. The 'tmctl tmm/ndal_tx_stats' command shows a high number of packet drops. The 'tmctl tmm/ndal_tx_stats' indicates a large number of queue full events.
Symptoms:The BIG-IP system may fail to deploy new or reconfigure existing iApps. When this happens, a long error message is displayed in the GUI that begins with:script did not successfully complete: ('source-addr' unexpected argument while executingThe message is also logged to /var/log/audit by scriptd with a severity of 'notice'.The unexpected argument mentioned in the error varies depending on the iApp being deployed and on the settings you configure. You may also see 'snatpool', 'ldap', etc.