[APPFW]"File too large" raises when upgrading appfw default signature "*Default Signatures"

[APPFW]"File too large" raises when upgrading appfw default signature "*Default Signatures"

book

Article ID: CTX463665

calendar_today

Updated On:

Description

Error "File too large" raises when to upgrade default signatures to version 89(V89) 

On GUI

1660702491956.png


Log sample could be seen in ns.log

Jul 25 09:09:18 <local5.info> 12 httpd: [49801] Netscaler_ip 127.0.0.1 - User nsroot - Remote_ip 127.0.0.1 - Method POST - Command { "params": { "warning": "YES" } }{ "systemfile": { "filename": "sig-r13.0b60.9v89s8.xml", "filecontent": "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

Resolution

Workaround

To upgrade the signature manually by command lines in command mode, steps are: 

1. Login to ADC server
2. Ensure to enable appfw feature.
3. Ensure auto-update URL is configured and auto-update is enabled.
4. Ensure that the ADC has connectivity to auto-update URL
5. If any proxy present, please configure the proxy ip and port. If no proxy is present, go to next step.
6. Go to URL shell and execute the following command:
/netscaler/auto_update_signatures
 

Solution

Size of V90 signatures has been decreased to < 2MB, which will kill the issue, in other words, there will be no this issue in future upgrade(or auto upgrade) to V90 onwards.

 

Problem Cause

Signature file size is more then 2MB which hits the limit of SystemFile API of which the call is used in the  upgrading process