-
Reliable CE design in GCP requires "LB > advertise on a virtual site IP" feature
In GCP, a multi-Nodes Site is deployed with an Internal Passthrough Network Load Balancer (NLB). Load-balanced packets by GCP NLB are received by backend VMs with the packet's source and destination IP addresses. Same for GCP Health-Check, the Des...0
-
Allow Quota to be reserved on a per namespace and/or per user basis.
Our tenant has a great deal of users and we occasionally run into hitting quota limit errors from users spinning up origin pools, WAF policies, and LBs. I would like a feature (through permission tagging) that would allow specific Users or Namespa...0
-
Increase spec.more_option.strict_sni_host_header_check_choice.additional_domains.domains to 100
Currently the limit is 52. Increasing to 100 would almost double the size. The use case is for cSSE which uses the volterra ingress controller to set up http loadbalancers. The domains are not controlled by us but by customers. Nginx which is used...1
-
allow WAF exclusion rules to match request headers
The current WAF exclusion rule allows rules to be applied based on the domain, path and method. These are all aspects of the http request. It would be great if this could be extended to the http request headers. For example, only performing the ex...0
-
colorblind-friendly dashboard reports for colorblind person
"We have a customer who's requesting the dashboard reports we provide them be colorblind-friendly. We have developed a way of manually altering the color palette to be more readable to a colorblind person, but would like to suggest in the future w...0
-
URL/URI Exemption for DDOS for false positive traffic
Would like to request if URL/URI exemption can be excluded in DDOS scanning? So that specific URL/URI path will not be terminated by DDOS protection but still other URL/URI path of the website can be protected. Currently we have client wherein...0
-
Disable weak ciphers in Customer Edges
Hi, Our security team is reporting the CEs allow connections on weak ciphers. Negotiated with the following insecure cipher suites: * TLS 1.2 ciphers: * TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA * TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA0
-
Install Private CA cert on Customer Edges
Hi, Our security team would like us to install certs from our Private CA on the Customer Edges. The cert provided by the CEs are expired and untrusted. -
On HTTP Load Balancers allow certificate files up to 20 kB.
When importing a TLS certificate, the upload file function restricts the file size for PEM or PKCS12-encoded certificate to 10 kB. A custom certificate we are trying to use on F5 Distributed Cloud load balancers are 14 kB with the full cert chain ...1
-
ACME client support on CE Nodes connecting to a Private CA.
Currently the only two methods for Certificate management are to upload certs and CAs via the console or make a script to upload the cert via an API call. It would be ideal if the CE Node could use an ACME client, to communicate with a private CA ...1 Planned