F5 LTM and CVE-2011-319

Back-end servers may be vulnerable to the attack.
The safest way to protect these servers with the BIG-IP is to add a simple iRule to each HTTP virtual server:

when HTTP_REQUEST {
# remove Range requests for CVE-2011-3192
HTTP::header remove Range
}

This iRule works for more than 5 ranges:

when HTTP_REQUEST {
# remove Range requests for CVE-2011-3192 […]