-
Choose which IP address from the XFF header list to chose as Source IP
Problem: identifying the correct client IP address, to be used of deny and allow lists when customer has 2 trusted proxies (CDN and ALB) before the http requests reach the CE, and both of them populates the XFF header. We need to consider the 2 tr...
-
Automated certificate issuance per Domain/Route on HTTP Load Balancer without sharing SANs across other sites on the same Load Balancer
Currently all domains on a single Load Balancer share a single certificate with SANs. This is a security concern both for enumeration and shared scope. It should be possible to specify individual automated certificates that aren't just using SANs. -
CE BGP KeepAlive/Hold Timers Tunning
CE BGP KeepAlive/Hold Timers Tuning - When customer is configuring BGP peering on Customer Edge, BGP keepalive/hold timers configuration should be offered to customer other than default 5/15 sec keepalive/hold timers. Each enterprise customer can ...
-
Geoloc filtering at L3 firewall/router
Feature Description Ability for F5XC admin so set L3 rules based on Geoloc. Current Geoloc rules are only at Service Policy level. Problem Statement L3 rules are more efficient than Service Policy rules Business Impact Customer does not have acces...
-
F5XC - JS and Captcha challenge customisation page
F5 Distributed Cloud WAAP to support customization of the following items: - JavaScript challenge interstitial page - Captcha challenge. Customization currently supported is pretty limited, and not enough for the customer needs. New customization...
Planned
-
Geo location base routing for HTTP LB
Ability to use HTTP LB routes with Geo Location rules. Example : apply specific WAF policy for specific countries.
-
Rate Limiting at L3 firewall/router
Feature Description Ability for F5XC admin so set Rate Limiting L3 rules at Firewall/Router level Current RL rules are only at Service Policy level. Problem Statement L3 rules are more efficient than Service Policy rules Business Impact Customer d...
-
F5XC - IP Geolocation database weekly update
Improve the Distributed Cloud IP Geolocation database update period from every 1-2 months to weekly, as we currently do for BIG-IP ASM.
-
F5XC - WAF blocking page for JSON payload - AJAX response
F5XC WAF blocking page does not support JSON content type. We need to support it similar to AWAF AJAX blocking page.
-
Official Support for Proxmox & CE deployments
Use case: Need official support for CE's running on Proxmox hardware
