-
On CE, would like to be able to access Load Balancer by IP
For HTTP and HTTPS Load balancers, would like to be able to bypass the hostname checking so they can be access by IP. I realize, at least for HTTPS, this could cause some certificate errors for the client. We have internally hosted sites hosted on...0
-
Create automated migration process from BIG-IP to XC
BIG-IP already has half of the required ETL process built in the Journeys tool. I suggest we take that output and build the other half of the ETL to bring the configurations into XC. My customer is looking at replacing several Viprions with 1000 V...1
-
Route Requests from CE to ibd API via CE<>RE VPN tunnels
Currently the required outbound connections from the CE to the internet are listed here https://docs.cloud.f5.com/docs-v2/platform/reference/network-cloud-ref#new-secure-mesh-v2-sites These do not include the FQDNs for bot defense like ibd-webemea...0
-
Limit of FQDN per Load Balancer
This FAQ recommend that you can put a limit 32 FQDN’s per LB "IF" they use the same cert. But, with a different certificates, this limit is true too. It's necessary allow more FQDN's per Load Balancer.1
-
unique ports for origin pool members
I have a customer that has requested the ability to have multiple origin pool servers with different ports. They are currently BIG-IP customers and so they expect this kind of ability. In their case, they want to have multiple FQDN's target the sa...0
-
Service policy blocked requests with Content-Type gRPC should respond with HTTP 403
When a request is blocked by a service policy, and has the content-type set to application/grpc, an HTTP 200 is sent back with grpc-status: 7. This is technically correct according to the gRPC spec, but causes confusion when looking for 403 block ...0
-
VRRP VIPs Advertisement to use virtual MAC in ARP response as per RFC
VRRP implementation should be RFC compliant which is to use virtual MAC in ARP response instead of using the physical MAC of the VRRP Master when VRRP VIPs Advertisement is enabled.0 Planned
-
Allow Letsencrypt challenge through the load-balancer to the origin
When an origin server behind F5DC uses a certificate provided by Letsencrypt, renewals of this certificate will fail, as the load-balancer intercepts ALL requests to http://<domain>/.well-known/acme-challenge/* and returns a 404 for a challe...1
-
CE Mesh and Site-to-Site WireGuard Option vs IPSEC Only
In the rapidly evolving domain of network connectivity and security, selecting the right technology for establishing secure channels is crucial. For network virtual appliances that are tasked with creating either full-mesh or site-to-site connecti...1
-
Ability to disable ARP response for VIPs configured on a HTTP/TCP LB advertised on a CE
This is to support a direct server return design, where a L4 loadbalancer is in front of 1 or more CEs, and load balances traffic to the CEs without changing the source IP of the packet. The return traffic goes from CE back to the client, bypassin...1