-
Implement a native, strict fail-closed boundary control on F5XC DNS Load Balancers to silently drop, block, or return NXDOMAIN or REFUSED responses for unmatched geolocations when no fallback pool is defined
Subject / Proposed Feature: Implement a native, strict fail-closed boundary control on F5XC DNS Load Balancers to silently drop, block, or return NXDOMAIN (RCODE 3) or REFUSED (RCODE 5) responses for unmatched geolocations when no fallback pool is... -
Custom Error Response Page for Threat Mesh block
Hello I'd like Threat Mesh to use the custom Error Response page configured on the LB. We've had some false positives where customers don't know how to react. Regards Peter -
F5XC - JS and Captcha challenge customisation page
F5 Distributed Cloud WAAP to support customization of the following items: - JavaScript challenge interstitial page - Captcha challenge. Customization currently supported is pretty limited, and not enough for the customer needs. New customization...
Planned
-
Custom response code for Service Policy
Feature Description Ability to choose the response code sent back Service Policy when request is blocked - by default 403 Problem Statement Customers don't want 403 error code as default SP blocking response code
-
F5XC - IP Geolocation database weekly update
Improve the Distributed Cloud IP Geolocation database update period from every 1-2 months to weekly, as we currently do for BIG-IP ASM.
-
Geoloc filtering at L3 firewall/router
Feature Description Ability for F5XC admin so set L3 rules based on Geoloc. Current Geoloc rules are only at Service Policy level. Problem Statement L3 rules are more efficient than Service Policy rules Business Impact Customer does not have acces...
-
F5XC - WAF blocking page for JSON payload - AJAX response
F5XC WAF blocking page does not support JSON content type. We need to support it similar to AWAF AJAX blocking page.
-
F5XC - Cert-Manager integration for any ACME support
Use Case: Certificate Life Cycle Management and support any ACME issuer Proposition: contribute to Cert-Manager community to provide F5 XC support. Competition: supported by Cloudflare and Akamai https://cert-manager.io/docs/configuration/acme/dns...
-
Support for Waiting Room
Some customers are looking for a function similar to Cloudflare's Waiting Room (https://www.cloudflare.com/waiting-room). This allows to gracefully limit number of users during peak hours, asking them to check and provide access whenever possible.
Planned
-
Enable support for initial NIST PQC (Post-quantum) algorithms across the XC platform for TLS.
Competitive providers are already implementing PQC algorithms as part of their platforms. Enterprises and governments are already planning for transition and in some cases, have already implemented elements of PQC algorithms, even ahead of standar...Planned
