F5 XC WAF requirement is to allow traffic from specific source site on downstream and upstream side.
We want to allow traffic from CHE and MUM site only at downstream connectivity and also at upstream connection should be from same sites only. As over firewall we allowed traffic from F5 ASIA regions IP only. Downstream: As we have specific VIP IP, if we made same changes in VIP Advertisement does it pass only through MUM and CHE, as VIP belongs to ASIA region only. Upstream: We allowed traffic through Specific Virtual Site from INDIA only in Origin Server so it will help us to pass traffic through this site towards server.22Views0likes2CommentsSite stuck during provisioning ?
Hi All, yesterday I installed the site with secure mesh and after some time the site got stuck in provisioning state, when I run some commands to see the status of the site and it shows below mentioned output "status ver" : "The service is being restarted" "config-network" : "The site is in provisioning state" Moreover the ssh and https access to the site was also lost and "health" command is also not showing any IP address configured, rebooted the site and nothing works. When checked the main console it shows like the site is being upgraded. Waited for 2 to 3 hours no difference. Also checked the F5 Zendesk document but couldn't able to relate to my situation. Left the site overnight and in the morning just rebooted the site and it actually provisioned. I observed the similar behavior during the F5 lab when the site was upgraded. it took atleast 6 to 7 hours of to upgrade and then the after the manual reboot the site got working. I just wana know is it a default behavior or am I missed something ?30Views0likes3CommentsDelete external Data Group File List via automation
Hi All, Hope you are doing well, I stuck in one of the automation case. It nightmare since long time. Can help to advice is there any automation way to delete Data Group File List from File Management. We have many unused file under System ›› File Management : Data Group File List, wanted to add automate deleation via ansible or python. Please suggest best approach. for reference this is locations. Thanks23Views0likes1CommentSSL authentication bypass on XC cloud F5
We have managed engine agent-based application which run over https protocol, every agent has unique self-signed certificate. Normally when connection is got initiated at that time agent certificate is gets authenticate with SSL certificate and connection is successfully established but when we onboarded this on F5 WAF with SSL certificate it is giving 403 http error code, so as per analysis we are getting 403 error code dues to authentication failure. So, is there any possibility to bypass SSL authentication on F5 XC WAF?43Views0likes3CommentsF5 DNS with cPanel Web Hosting Server
Hi, We have a publicly accessible web hosting server backed by cPanel and currently we are using F5 to handle our DNS. The problem that we are facing is when one of our end customer adds a Zone /DNS record INSIDE his cPanel account and everytime we have to manually check and add those records in F5 to make things work. Is there a solution for this?.649Views0likes4CommentsF5 on AWS Cloud
Hi Team, We have a requirement coming up where few applications need load balancing on AWS cloud and customer want to explore the F5 load balancing options. I checked AWS marketplace and there are multiple options for Pay-as-you-go (PAYG) scheme. I have few doubts: Out of multiple options available as per throughput in AWS (25Mbps/200Mbps/1Gbps/5Mbps), how can we propose the best option. Based on the number of expected client session to the application, can we identify the correct Virtual Edition? Is there any document available that mentions the VE Image based on throughput and the number of connections it can handle? Is there any option that we can re-use the existing license from the hardware device running on-premise? Thanks in advance Vijay11Views0likes1CommentiRule help masking IBM host URL/URI
I have a customer who has a contract with IBM that is requiring that we hide the internal URL/URI paths. When users go to the following URL/URI: cpd-cp4ba-uat.apps.cp4bauat1.companya.com/icn/navigator/?desktop=psecm the same host redirects them to the login URL/URI page: cp-console-cp4ba-uat.apps.cp4bauat1.companya.com/oidc/login.jsp. HTTP 302, 301 and 200 occur are viewed when I run HTTP watch. What the contract is requiring is that clients should use a much simpler URL:https://psecm-uat1.companya.com while masking the two lengthy paths previously displayed. We created the vs_psecm-uat1.companya.com and the server pool, which contains the IP for host cp4bauat1.companya.com. All URLs are HTTPS, therefore, I have already created the HTTP Profile and SSL profile. In the past I was able to mask the destination with HTTP::header replace...etc.. In this situation it is not working with the replace. I am not sure if I should create an iRule to redirect(client side) and a rewrite for masking the HTTP Response header. ???? Help is greatly appreciated.43Views0likes1Comment