-
Granular reports for WAF/BOT/DDOS activity
It would better enable customers to visualize specific traffic patterns and block patterns of F5. Often times these high-level reports are generated regularly to track changes and show long winded changes in risk over time. An example would be; "S...0
-
TLS Load-balancer certificate issuance via CSR
A Silverline "feature" (Certificate keeper) that would be nice to have in F5XC would be an additional way to install a certificate on a load-balancer with F5XC providing a CSR. Steps: customer choose this option in the load-balancer form they’re p...2 Planned
-
Feature Request: Add Seceon SIEM Receiver Support in F5 XC
Dear F5 Distributed Cloud Team, We are using Seceon SIEM as our log collector and have encountered challenges with the F5 XC receiver configuration. Currently, there is no option available to select Seceon SIEM in the receiver settings. Our attemp...0
-
fix vulnerability for origin pool TLS cert checking
Summary: Fix vulnerability for origin pool TLS cert checking. There should be the option to validate the SAN entry of the origin certificate against request or SNI. It's best if I point to the expected client behaviour when using the TLS mode "ser...0
-
Create custom API groups
To be able to create more specific roles. For example one requirement that we have is for devops users to be able to create WAF exclusion rules. Desire is not to have access to change anything else on the LB.0
-
Support HTTP/3
Add HTTP load balancer support for HTTP/3 on client connections.0
-
injecting JA4 TLS fingerprint into every HTTP request as header
I'd like to inject the Ja4 tls fingerprint as a request header into every request sent to the origin. why: to have a relatively unique signature we can track that will be included in all the stacks upstream for correlation and to allow upstream ac...0 Planned
-
Add custom VIP to virtual site reference in HTTP and TCP Load Balancers
I want to use the same custom VIP for a load balancer across multiple sites and I know I can simply add multiple site object references to the custom vip section of the http load balancer, but I'll need to do this for any new site added instead of...
3
Planned
-
DNS LB Should Support Private IPs via Site (CE) for Pool Members
Many GSLB use-cases are internal-facing. XC DNS supports adding private IPs for records but DNS LB requires public IP for pool members. Ideally, DNS LB would support private IPs being mapped to a site similar to HTTP LB origin pools and health mon...1
-
Threshold-based DataGuard for BOLA Prevention
Threshold-based DataGuard for BOLA Prevention 1) Why? BOLA(Broken Object Level Authorization) is the #1 API attack in the OWASP API Top 10. While the attack is now quite well-known, preventing it is still difficult because of its logic. 2) 3 attac...
0