Post Preservation error using custom template through F5 RP

[perry19987]

Hello community,

I currently have a problem while using custom template on Post Preservation directive (2.4.14.4 release). We recently moved our reverse proxy to F5 BigIP and the integration broke. Everything works fine with default templates.

In ltm log there was:
Apr 11 15:08:05 pe-intra-test02 err tmm[19716]: 011f0016:3: http_handle_pipelined_data - Invalid action:0x107000 Server sends too much data. serverside (<my_apache_ip_port> -> <client_ip_port>) clientside (<client_ip_port> -> <f5_ip_port>) (Server side: vip=/Common/vs_domain_443 profile=http pool=/Common/pool<my_apache_ip_port> server_ip=<my_apache_ip>)_

During troubleshooting sessions, we found that for some POST Requests our apache answers with double HTTP responses (for others, not) where first response contains “Content-Length” header. F5 bigip after receiving the response (according to Content-Length) was confused to receive additional data (packets) and sent RESETs to both client and application.

RHEL 7.9 version and Apache 2.4.6

I am waiting for a retry with a new release of the module thanks to zandbelt -> https://github.com/OpenIDC/mod_auth_openidc/discussions/1325

Thanks for the help :)

[perry19987]

We tried updating with intermediate releases (like 2.4.16.4) but still getting the same behavior

[zandbelt]

you'll need to wait for 2.4.17.1

[perry19987]

Ok, thanks

[zandbelt]

2.4.17.1 is released here: https://github.com/OpenIDC/mod_auth_openidc/releases/tag/v2.4.17.1