-
Missing documentation for Service Discovery in BIG-IP
The Service Discovery is not well documented, especially when it comes to the interfaces of the CE, on which the Service Discovery can be run. In fact, I wasn't able to use the SLO interface. Instead the SLI had to be used. Things like that need t...0
-
F5XC - JS and Captcha challenge customisation page
F5 Distributed Cloud WAAP to support customization of the following items: - JavaScript challenge interstitial page - Captcha challenge. Customization currently supported is pretty limited, and not enough for the customer needs. New customization...
2
Planned
-
URL evasion on Distributed Cloud
XC needs improvement in regards to URL evasion. I've been trying to block URL evading traffic by creating and updating regex rules in Service Policies but this isn't scalable or reliable since attackers can change the URL to hit the origin and byp...0
-
F5XC - WAF blocking page for JSON payload - AJAX response
F5XC WAF blocking page does not support JSON content type. We need to support it similar to AWAF AJAX blocking page.
1
-
F5XC - IP Geolocation database weekly update
Improve the Distributed Cloud IP Geolocation database update period from every 1-2 months to weekly, as we currently do for BIG-IP ASM.
0
-
Support for Customer Edge (CE) Layer 2 EVPN multicloud connect
The CE support something like Layer 3 VPN between sites with the global network feature (probably mp-bgp with MPLS is used by XC in the background) but why not also Layer 2 where 1 VM in Azure for example sees a VM in AWS like layer 2 connected th...0
-
cert-manager support
Use Case: Certificate Life Cycle Management and support any ACME issuer Proposition: contribute to Cert-Manager community to provide F5 XC support. Competition: supported by Cloudflare and Akamai https://cert-manager.io/docs/configuration/acme/dns...0
-
Local CE Monitoring
The Local CE provides a web console which provides real-time status of the state of the Local CE. Please look at options to allow more than one credential login so that additional monitoring can be deployed to monitor the CE near real-time. There ...1
-
Support OpenTelemetry integration and export for HTTP Loadbalancers
The HTTP Loadbalancers log in the Requests pane all connection information. These can be exported as JSON using the Global Log Receiver but it would be useful to also support instrumenting these transactions with OTEL headers (e.g. traceparent) an...0
-
Threat Mesh Enable - Staging Option
Currently the only option for threat mesh is enable/disable. Since Threat Mesh DB is updated to block using an IP there is a possibility of false positives and the chances of blocking an entire organization based on one bad actor that is coming fr...1