-
Limit of FQDN per Load Balancer
This FAQ recommend that you can put a limit 32 FQDN’s per LB "IF" they use the same cert. But, with a different certificates, this limit is true too. It's necessary allow more FQDN's per Load Balancer.1
-
Option to disable Host Header rewrites on DNS based pools
When using a DNS based origin server, there is an automatic host header rewrite to change the host header to the value of the configured DNS name. This does not work for all cases, so it would be good to have an option to disable the rewrite when ...0
-
Public DNS Origin Server TTL
When configuring an Origin Server using the "Public DNS" method, there is a configuration option for "DNS Refresh Interval". It would be better, or at least nice to have another option to just honour the TTL set by the DNS record. -
unique ports for origin pool members
I have a customer that has requested the ability to have multiple origin pool servers with different ports. They are currently BIG-IP customers and so they expect this kind of ability. In their case, they want to have multiple FQDN's target the sa...0
-
Add the possibility of using a registry container with a private certificate on vk8s.
On the vk8s solution it is possible to configure Container Registries. Our container registries are internal to the company and use certificates from an internal PKI. We need the ability to use these registries, for example either adding root CA o...1 Planned
-
Allow Letsencrypt challenge through the load-balancer to the origin
When an origin server behind F5DC uses a certificate provided by Letsencrypt, renewals of this certificate will fail, as the load-balancer intercepts ALL requests to http://<domain>/.well-known/acme-challenge/* and returns a 404 for a challe...1
-
HTTP LB - proxy protocol
Description: add the proxy protocol support on HTTP LB in order to discover the real client's real IP. See envoy documentation here Use case: - On Premise deployment using a downstream LB : On Premise, a TCP LB (BIG-IP) can load-balance traffic to...2
-
L7 DDoS black hole: Fast ACL applied to a list of REs
Use Case An App, published on XC REs, can be consumed by legitimate users mainly located in Region A. We saw that lastest L7 DDoS attacks are widely distributed accross regions. When a L7 DDoS is to heavy, SRE can decide to protect the infra and s... -
Load Balance between RE and CE
Leave the application accessible through RE and CE, so if the RE suffers any unavailability, access to the application will go through the CE F5XC instance via the internet. Not leaving the application unavailable.0
-
CE to prefer AWS NLB endpoint in the same AZ to reduce inter-AZ data transfer costs
For an AWS VPC site cluster of 3 nodes (1 CE in each AZ), when defining an origin pool with the following details: Type: DNS Name of Origin Server on given Sites DNS Name: <AWS NLB FQDN, e.g. my-nlb-123456789012.us-west-2.elb.amazonaws.com> ...0