-
Allow disabling L7 DDoS per load-balancer
While we typically want this protection, it is not acceptable to have a feature forcibly and permanently enabled that we have no control over.0 Planned
-
Support HTTP/3
Add HTTP load balancer support for HTTP/3 on client connections.0
-
Matching criteria with Negation/Not on policies
For example country match in rate limit policy, only allows selection of countries with a limit. thus multiple policies will be required if customer would like to exclude all countries except for a few countries. for less complication, matcher fie...0
-
Disable specific Signature IDs from being allowed with AI/ML Model
We're seeing some signature IDs coming though we'd like to block, but AI/ML is allowing these signature IDs. Ideally we'd be able to create an exception within the console on specific signature IDs to not be evaluated by AI/ML so we can enforce th...1
-
If XC cannot enforce TLS Security Level, provide warning message
We recently ran into this issue: https://f5cloud.zendesk.com/hc/en-us/articles/24793738208151-Why-is-TLSv1-0-1-1-enabled-for-F5-XC-HTTP-LB-even-though-TLS-setting-is-High When the same certificate is used for multiple Load Balancers on the same VI...0
-
Allow searching of matching criteria within route rule configuration
Currently the search function at the top of the Routes only searches the pool name assigned to each rule. It does not allow you to search for values in the header for example. If a rule has a Host header match you cannot search for that domain.0
-
LetsEncrypt module to use highest priority domain as CN
Currently, when a certificate is issued, the LetsEncrypt module sets the CN of the certificate seemingly randomly from the domain list and all domains as SAN entries. It would be great if the CN could ALWAYS be the domain configured as priority 1 ...1
-
Enable support for initial NIST PQC (Post-quantum) algorithms across the XC platform for TLS.
Competitive providers are already implementing PQC algorithms as part of their platforms. Enterprises and governments are already planning for transition and in some cases, have already implemented elements of PQC algorithms, even ahead of standar...2 Planned
-
Monitoring and optimizing purpose. To maintain server performance, ensure system stability, defend against attacks, and provide quality service under varying loads.
CPS can measure how many new connections are established in a given second. It’s important for assessing the load on a server or service, especially in scenarios like web traffic or API usage. Monitoring CPS can help identify bottlenecks and ensur...0
-
Support for Passphrases in TLS Certificates in .crt, .cer, and .pem Formats
TLS Certificates do not currently support passphrases, so the following steps need to be taken: Issue: Invalid TLS certificate and/or Private key tls failed to parse private key. While formats such as pkcs12, p12, or pfx support passphrases, I wou...0