Reset Search
 

 

Article

13800 - Virtual web application firewall (vWAF) fails after upgrade to vTM 17.1

« Go Back

Information

 
Last Modified Date11/27/2017 1:08 AM
Synopsis
This article describes an issue where the vWAF will not start after upgrading from vTM 11.1 to 17.1.
Problem or Goal
If a traffic manager running vTM version 11.1 has upgraded vWAF manually to a version higher than 4.9-41260, the vWAF will refuse to start after upgrading to vTM 17.1.

When rebooting after the upgrade, the error log will show:
SERIOUS appfirewallcontrolerror Error restarting application firewall: 
service.sh stingrayafm stop failed: Usage: service PRODUCT start|stop|restart|status
Error: version for stingrayafm is invalid
SERIOUS appfirewallfailed       All application firewall decider processes have failed
SERIOUS appfirewalldeciderfail  Application firewall decider process running on 
127.0.0.1:14000 has failed
SERIOUS appfirewallfailed       All application firewall decider processes have failed

If vTM 11.1 was upgraded to vWAF 4.9-41849, the directory /logs/stingrayafm/stingrayafm-17.1 will show:
root@va17.1:/logs/stingrayafm/stingrayafm-17.1# ls -la
total 32
drwxr-xr-x 8 root root 4096 Feb 17 12:35 4.9-41260
lrwxrwxrwx 1 root root    9 Feb 17 12:35 current -> 4.9-41849  
(4.9-41849 does not exist in /logs/stingrayafm/stingrayafm-17.1 )
-rw-r--r-- 1 root root   10 Jan 19 03:02 default_version.id
drwxr-xr-x 4 root root 4096 Feb 17 12:35 generic
-r-xr-xr-x 1 root root 1969 Jan 19 03:02 migrate.sh
-r-xr-xr-x 1 root root 2669 Jan 19 03:02 service.sh
-rw-r--r-- 1 root root   10 Feb 17 12:35 version.id
Cause
Solution
To resolve this issue, use one of the following methods:

Method 1: vWAF and WAF updater were both upgraded

  • Download the hotfix attached "Generic-17.1-vWAF_11.1_upgrade.tgz".
  • In the Traffic Manager UI go to  System > Traffic Managers > Upgrade and upload the file.
 

Method 2: WAF was only upgraded

Copy the directory from the 11.1 folder:
root@va171:# cd /logs/stingrayafm/stingrayafm-11.1

root@va171:/logs/stingrayafm/stingrayafm-11.1# ls
4.9-40393  
4.9-41849  
current  
default_version.id  
generic  
migrate.sh  
service.sh  
version.id

root@va171:/logs/stingrayafm/stingrayafm-11.1# cp -R 4.9-41849 
/logs/stingrayafm/stingrayafm-17.1/

Restart Zeus:
$ZEUSHOME/restart-zeus
Related Links
Created ByCode Deployment

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255