-
JSON-formatted IP Address list of the F5 ADN
F5 needs to establish a public API endpoint capable of returning JSON-formatted responses for the IP ranges, rather than the current provision of a text file containing the F5 ADN IP list. This allows customers to programmatically retrieve the IP ...3
-
Security Dashboard - Sankey Diagram
I have a customer that requested a Security Dashboard that displays what the XC control capabilities mitigate, within a Sankey Diagram. (Attached) "This would allow our team to show the actual value XC is providing our organization, within a simpl...0
-
Matching criteria with Negation/Not on policies
For example country match in rate limit policy, only allows selection of countries with a limit. thus multiple policies will be required if customer would like to exclude all countries except for a few countries. for less complication, matcher fie...0
-
Improve TLS Fingerprint Blocking
Currently, JA3 fingerprints are supported, which are hashes of multiple values. This fine for blocking a specific fingerprint, but does allow blocking "families" of fingerprints. Consider that some but not all TLS parameters may be shared among at...1 Planned
-
Selectively enable CVE signatures
There is only on or off for "threat campaigns" or CVE attack signatures. This does not make any sense. -
Allow disabling L7 DDoS per load-balancer
While we typically want this protection, it is not acceptable to have a feature forcibly and permanently enabled that we have no control over. -
Remove the limitation for requests logs export
There is a 500 requests logs export limitation, this limit should be removed as we might missing a lot of logs when we export the logs. Let's say there are 10K logs from 50 IP addresses and the last 500 logs are only from 2 IP addresses, when we e...0
-
If XC cannot enforce TLS Security Level, provide warning message
We recently ran into this issue: https://f5cloud.zendesk.com/hc/en-us/articles/24793738208151-Why-is-TLSv1-0-1-1-enabled-for-F5-XC-HTTP-LB-even-though-TLS-setting-is-High When the same certificate is used for multiple Load Balancers on the same VI...0
-
Support HTTP/3
Add HTTP load balancer support for HTTP/3 on client connections.0
-
Route info in LB view
Load Balancers with dozens of routes are hard to troubleshoot due to no info in the GUI/console. Customers are required to manually check JSON but it's hard to find a corresponding L7 route. Updating Routes view with configured settings (such as h...1 Planned