-
Brute Force and Malicious User - skip processing except for the login page
Context After having detecting and mitigating a automation request with Bot Defense, Malicious User (MU) can prevent any further automation request from the same User Identifier. The benefit is that MU doesn't charge mitigated requests but Bot Def...0
-
LB HTTP health monitor - no receive string
XC's synthetic monitors include the capability to specify a regex pattern against response body. This is helpful in general for targeted probing, i.e. common application-side built-in health checks that report on critical backend system resources/...0
-
Add tool for checking TCP port of origin servers
There is no capability for checking status of origin server's TCP port with currently available site tools (capture attached). The idea is to provide a new site tool to help faster checking status of origin's TCP port without waiting for healthche...0
-
TLS Load-balancer certificate issuance via CSR
A Silverline "feature" (Certificate keeper) that would be nice to have in F5XC would be an additional way to install a certificate on a load-balancer with F5XC providing a CSR. Steps: customer choose this option in the load-balancer form they’re p...2 Planned
-
Granular reports for WAF/BOT/DDOS activity
It would better enable customers to visualize specific traffic patterns and block patterns of F5. Often times these high-level reports are generated regularly to track changes and show long winded changes in risk over time. An example would be; "S...0
-
Create custom API groups
To be able to create more specific roles. For example one requirement that we have is for devops users to be able to create WAF exclusion rules. Desire is not to have access to change anything else on the LB.0
-
Support HTTP/3
Add HTTP load balancer support for HTTP/3 on client connections.0
-
Add custom VIP to virtual site reference in HTTP and TCP Load Balancers
I want to use the same custom VIP for a load balancer across multiple sites and I know I can simply add multiple site object references to the custom vip section of the http load balancer, but I'll need to do this for any new site added instead of...
3
Planned
-
injecting JA4 TLS fingerprint into every HTTP request as header
I'd like to inject the Ja4 tls fingerprint as a request header into every request sent to the origin. why: to have a relatively unique signature we can track that will be included in all the stacks upstream for correlation and to allow upstream ac...0 Planned
-
DNS LB Should Support Private IPs via Site (CE) for Pool Members
Many GSLB use-cases are internal-facing. XC DNS supports adding private IPs for records but DNS LB requires public IP for pool members. Ideally, DNS LB would support private IPs being mapped to a site similar to HTTP LB origin pools and health mon...1