IT09358: DATAPOWER MPGW, WSP AND WAF SERVICES DO NOT PRESERVE HTTP 1.0 CONTENT-LENGTH ON PASSTHROUGH RESPONSE IF CONTENT-LENGTH > 32K
Fixes are available
Fix packs for DataPower XML Security Gateway version 6.0
Fix packs for DataPower B2B Appliance version 6.0
Fix packs for DataPower Integration Appliance version 6.0
Fix packs for DataPower Low Latency Appliance version 6.0
Fix packs for DataPower Service Gateway version 6.0
Fix packs for DataPower Service Gateway version 6.0.1
Fix packs for DataPower B2B Appliance version 6.0.1
Fix packs for DataPower Integration Appliance version 6.0.1
Fix packs for DataPower Service Gateway version 7.0
Fix packs for DataPower B2B Appliance version 7.0
Fix packs for DataPower Integration Appliance version 7.0
Fix packs for DataPower Gateway version 7.1
Fix packs for DataPower Gateway version 7.2
Closed as program error.
Affected are DataPower MultiProtocol Gateway (MPGW), Web Service Proxy (WSP) and Web Application Firewall (WAF) services. The services don't preserve HTTP Content-Length header larger than 32k if the following conditions are met: - HTTP 1.0 on the request side (either forced by FSH or by request) - Response Type in MPGW/WSP/WAF is set to passthrough - Backend does send Content-Length header Please be aware of these specific conditions. As other cases allow to omit Content-Length header following RFC 2626 Section 4.4.
Use XML Firewall service.
Affected might be the customers using the Multi-Protocol Gateway, Web Service Proxy or Web Application Firewall with a HTTP(S) 1.0 Front Side Handler. When the Response Type of the service is Pass through, the Content-Length HTTP header is preserved from backside to frontside only when the original content is less than or equal 32000 bytes. When bigger, the header is not included.
Fix is available in 220.127.116.11, 18.104.22.168, 22.214.171.124, 126.96.36.199 and 188.8.131.52. For a list of the latest fix packs available, please see: http://www-01.ibm.com/support/docview.wss?uid=swg21237631
Reported component name
DTAPWR B2B APL
Reported component ID
Last modified date
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fixed component name
DTAPWR B2B APL
Fixed component ID
Applicable component levels