-
Brute-Force Login Detection / mitigations
An common L7 DDoS mechanism we've seen is a small number of IP's attempting garbage login attempts at relatively low-rates which often elude rate-limiting. A relatively small number of bot IP's performing logins at the same time can consume resour... -
Provide Transformers to Direct Routing path matching
I have a rule in-place to block access to a particular pathname; the customer wants to display a specific blocking page instructing the user to use that function, they need to use the non-public interface on VPN. Blocking the page returns a 403 wh... -
Add Client IP/CIDR's to Create Simple Routes
Would like to be able to create custom routes for certain client IP/CIDR's for a couple of use cases: 1. Disaster Recovery testing - presently, for small-scale tests, (active-active), testers test update their hosts files on their testing pc's to ... -
Expose incoming/outgoing connection metrics and concurrent connection limits in F5XC
We would like to request enhanced observability capabilities in F5 Distributed Cloud (XC), specifically the ability to monitor incoming and outgoing TCP connection metrics, including: Current active TCP connections (incoming/outgoing) Concurre... -
XC Support for External Feedlists
I'm requesting that XC enable an option to ingest external feedlists, similarly to how Big IP AFM handles this today. The current workaround in XC involves navigating around quotas in service policies (since we need logging of this and cant use fa... -
Malware protection recursive analysis
We are submitting a Request for Enhancement to ask for the addition of prefix-based and regex-based path matching within the Malware Protection module of F5 Distributed Cloud. Current Limitation The current Malware Protection GUI only supports Exa... -
Emergency Contact Details
A feature request to add emergency contact details in the event of an active security emergency how to contact individuals from organisations. This was a feature available in Silverline (billing/technical contact information to include individual ... -
CVS download of routed DDoS logs in XC console
Add a download to CVS format option to download historic routed DDoS logs from the XC console -
TCP tls termination with SNI passthough
TCP load balancers do support TLS termination but they don't forward on the existing SNI information This means we have to create a loadbalancer and an origin pool pair per named endpoint Our use case is kafka where we need to target the correct b... -
CRL support for RE
CRL (Certificate Revocation List) settings are currently only supported on Customer Edges (CEs). They are NOT supported on Regional Edges (REs). we need CRL support for RE
