-
Allow Letsencrypt challenge through the load-balancer to the origin
When an origin server behind F5DC uses a certificate provided by Letsencrypt, renewals of this certificate will fail, as the load-balancer intercepts ALL requests to http://<domain>/.well-known/acme-challenge/* and returns a 404 for a challe...1
-
Activate MTLS for API Protection
At the moment, API Protection doesn't support MTLS for a specific API or a specific IP that can access to these APIs.We are requiring that because on our nginx plus infrastructures it is possible.We can't migrate customers with this type of "basic...0
-
Improve CE deployment time
Currently CE takes at least 15-30 minutes to come online upon deployment. A significant portion of it involves downloading container images required to run the CE components. Could the container images instead be baked into the CE image (ISO, AMI ...0
-
Reporting Enhancement for Low and Slow DDoS Attack reporting
Dear all During the troubleshooting of a deployment we were experiencing HTTP response codes of 408, without understanding the reason. Opening a support ticket we were informed that the HTTP POST was identified as a Low and Slow and the 408 was th...0
-
Request_ID header add ability
For full visibility the ability to dynamicaly include the request_id value as a header would allow users to have full visibility through a single place. Requests dropped from F5 XC can be identified through the request_id, requests dropped within ... -
Simply backup all Volterra configuration (or per namespace)
I need to simply export all configuration (http load balancers, ip prefix sets, service policy, origin pool, health check, certificates, etc)0
-
Allow CE debug logs to be uploaded to support cases
Currently it is only possible to attach image or text files no larger than 5MB. Debug logs are tar archives and currently cannot be attached to support cases.0
-
Allow Site Access Based on Source MAC Addresses
Enhance security measures of our site and would like to implement the following Allow Access Based on Source MAC Addresses: Access to LB site should be restricted to specific source MAC addresses that we will provide. Only these authorized MAC add...0 Will not implement
-
WAF exclusion rule - domain regex
A customer has deployed a HTTP LB for apps in non-prod (myapp-x.np.mydomain.com) and prod environement (myapp-x.np.mydomain.com). When a WAF False Positive occurs on an App in non-prod, they want to create ONE WAF exclusion rule that applies for n...0
-
Additional fields for security dashboard in `system` namespace
The following information are available in the security dashboard under individual namespace but are missing from the `system` namespace. WAF LB Mode DDOS Detection/Mitigation IP Reputation0