-
Support for Customer Edge (CE) Layer 2 EVPN multicloud connect
The CE support something like Layer 3 VPN between sites with the global network feature (probably mp-bgp with MPLS is used by XC in the background) but why not also Layer 2 where 1 VM in Azure for example sees a VM in AWS like layer 2 connected th...0
-
F5XC - JS and Captcha challenge customisation page
F5 Distributed Cloud WAAP to support customization of the following items: - JavaScript challenge interstitial page - Captcha challenge. Customization currently supported is pretty limited, and not enough for the customer needs. New customization...
2
Planned
-
F5XC - WAF blocking page for JSON payload - AJAX response
F5XC WAF blocking page does not support JSON content type. We need to support it similar to AWAF AJAX blocking page.
1
-
F5XC - IP Geolocation database weekly update
Improve the Distributed Cloud IP Geolocation database update period from every 1-2 months to weekly, as we currently do for BIG-IP ASM.
0
-
Alerts on down origin pools
Have the ability to get an alert when an entire pool goes down. Right now, only ServiceEndpointHealthcheckFailure is available, but that alerts on any node in a pool from any RE. Alerting on down pools should be a core function in the product.0
-
Local CE Monitoring
The Local CE provides a web console which provides real-time status of the state of the Local CE. Please look at options to allow more than one credential login so that additional monitoring can be deployed to monitor the CE near real-time. There ...1
-
cert-manager support
Use Case: Certificate Life Cycle Management and support any ACME issuer Proposition: contribute to Cert-Manager community to provide F5 XC support. Competition: supported by Cloudflare and Akamai https://cert-manager.io/docs/configuration/acme/dns...0
-
Threat Mesh Enable - Staging Option
Currently the only option for threat mesh is enable/disable. Since Threat Mesh DB is updated to block using an IP there is a possibility of false positives and the chances of blocking an entire organization based on one bad actor that is coming fr...1
-
Integrate Google Chronicle with Global Log Receiver
Some of the customers use Google Chronicle as a log receiver and currently, it has been confirmed that this log receiver is not supported by the GLR service.1
-
HTTP Load Balancer: HSTS response header is missing includeSubdomains
Best practices are to include the includeSubdomains directive in HSTS header. When HSTS is enabled on an HTTP load balancers, includeSubDomains is missing from Strict-Transport-Security response header. Reference links: https://datatracker.ietf.or...2