You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+22Lines changed: 22 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,27 @@
1
1
# Changelog
2
2
Changes to this project are documented in this file. More detail (including information on releases before 3.4) and links can be found in the AS3 [Document Revision History](https://clouddocs.f5.com/products/extensions/f5-appsvcs-extension/latest/refguide/revision-history.html).
- AUTOTOOL-3491: ([GitHub Issue 619](https://github.com/F5Networks/f5-appsvcs-extension/issues/619)): ALG_Log_Profile. Currently requires CGNAT to be provisioned and BIGIP version to be 15.1 or higher
9
+
- AUTOTOOL-3492: ([GitHub Issue 575](https://github.com/F5Networks/f5-appsvcs-extension/issues/575)): RTSP_Profile. algLogProfile and logPublisher properties require CGNAT to be provisioned and BIGIP version to be 15.1 or higher
10
+
- AUTOTOOL-3494: ([GitHub Issue 576](https://github.com/F5Networks/f5-appsvcs-extension/issues/576)): TFTP_Profile. algLogProfile and logPublisher properties require CGNAT to be provisioned and BIGIP version to be 15.1 or higher
11
+
- AUTOTOOL-3493: ([GitHub Issue 570](https://github.com/F5Networks/f5-appsvcs-extension/issues/570)): Add algLogProfile and logPublisher properties to FTP_Profile which requires CGNAT to be provisioned and BIGIP version to be 15.1 or higher
12
+
- AUTOTOOL-3615: SOCKS_profile (ltm profile socks) which can be attached to a Service_TCP with profileSOCKS
13
+
14
+
### Fixed
15
+
- AUTOTOOL-2966: GSLB topology records update order fails in unchecked mode
16
+
- AUTOTOOL-3517: Shared virtual addresses are not removed when no longer in use
17
+
- AUTOTOOL-2489: Unchecked mode fails when URLs have authentication
18
+
19
+
### Changed
20
+
- Updated to Service Discovery 1.12.0-1
21
+
- AUTOTOOL-3640: support for credential objects
22
+
23
+
### Removed
24
+
4
25
## 3.42.0
5
26
6
27
### Added
@@ -17,6 +38,7 @@ Changes to this project are documented in this file. More detail (including info
17
38
- Updated to Service Discovery 1.11.2-1
18
39
- AUTOTOOL-3335: ([GitHub Issue 610](https://github.com/F5Networks/f5-appsvcs-extension/issues/610)): Service Discovery / Consul and jmespathquery to configure priorityGroup for pool members
19
40
- AUTOTOOL-3534: Update packages to latest available versions
Copy file name to clipboardExpand all lines: docs/declarations/application-security.rst
+41-1Lines changed: 41 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -758,6 +758,42 @@ This declaration creates the following objects on the BIG-IP:
758
758
759
759
|
760
760
761
+
.. _slnat:
762
+
763
+
Configuring Security Log Profile NAT settings
764
+
`````````````````````````````````````````````
765
+
.. sidebar:: :fonticon:`fa fa-info-circle fa-lg` Version Notice:
766
+
767
+
Support for lsnLegacyMode, logStartOutboundSessionDestination, and logEndOutboundSessionDestination in the Security Log Profile NAT class is available in BIG-IP AS3 v3.43 and later.
768
+
769
+
In this example, we show how you can configure Security Log Profile NAT settings in an AS3 declaration. These settings determine how the system logs firewall NAT events.
770
+
771
+
While the Security Log Profile with NAT settings has long been supported, AS3 3.43 introduced three new properties for the NAT object, related to LSN legacy mode:
772
+
773
+
- **lsnLegacyMode**: specifies whether translation events and other NAT events are logged in existing CGNAT/LSN formats (for backward compatibility with LSN events). The following options are applicable only if lsnLegacyMode is enabled (**true**).
774
+
775
+
- **logStartOutboundSessionDestination**: includes the destination address and port with the log entry for the *start* of the translation event for a NAT client.
776
+
- **logEndOutboundSessionDestination**: includes the destination address and port with log entry for the *end* of the translation event for a NAT client.
777
+
778
+
.. IMPORTANT:: If **lsnLegacyMode** is enabled, you cannot set the **rateLimitStartInboundSession**, **rateLimitEndInboundSession**, **rateLimitStartOutboundSession**, or **rateLimitEndOutboundSession** properties.
779
+
780
+
For more information on the Security Log Profile, see |seclog|. For details on all of the available NAT settings, see |slpnat|.
781
+
782
+
This declaration creates the following objects on the BIG-IP (if you try to use the following declaration on an AS3 version prior to 3.43, it will fail. On previous versions, remove the new settings, highlighted in yellow):
783
+
784
+
- Partition (tenant) named **Sample_sec_log_profile_nat**.
785
+
- An Application named **A1**.
786
+
- A Security Log Profile named **secLogNAT** with a number of settings, including **lsnLegacyMode**, **logStartOutboundSessionDestination**, and **logEndOutboundSessionDestination** introduced in AS3 3.43.
Copy file name to clipboardExpand all lines: docs/declarations/network-security.rst
+40Lines changed: 40 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -359,12 +359,52 @@ This declaration creates the following objects on the BIG-IP:
359
359
360
360
|
361
361
362
+
.. _alglog:
363
+
364
+
365
+
Creating an ALG log profile in a declaration
366
+
````````````````````````````````````````````
367
+
.. sidebar:: :fonticon:`fa fa-info-circle fa-lg` Version Notice:
368
+
369
+
Support for ALG logging profiles is available in BIG-IP AS3 3.43. |br| You must have the CGNAT module licensed and provisioned on BIG-IP 15.1 or later.
370
+
371
+
This example shows how you can create an ALG (Application Layer Gateway) logging profile in an AS3 declaration in version 3.43 and later.
372
+
373
+
An ALG log profile allows fine grain control of the logging for ALG events. When attached to a supported ALG profile (NAT, FTP, RTSP, SIP, and PPTP), you can control the events, to log as well as optional elements in the log entry. For more information on ALG profiles, see |algp| in the BIG-IP documentation.
374
+
375
+
For AS3 options and usage, see |alg|.
376
+
377
+
.. NOTE:: The following example only creates the ALG logging profile, you need to configure additional objects to be able to use this profile.
378
+
379
+
This declaration creates only the following objects on the BIG-IP:
380
+
381
+
- A partition (tenant) named **Tenant**
382
+
- An Application named **Application**
383
+
- An ALG log profile named **myProfile** with a number of properties.
Copy file name to clipboardExpand all lines: docs/declarations/non-http-services.rst
+35-11Lines changed: 35 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -112,12 +112,25 @@ This declaration creates the following objects on the BIG-IP:
112
112
113
113
Creating an FTP profile in a declaration
114
114
````````````````````````````````````````
115
-
This example shows how you can create an FTP profile in a declaration (example 9 showed how to use an existing FTP profile). See |ftpprofile| in the Schema Reference for more usage options and information.
115
+
.. sidebar:: :fonticon:`fa fa-info-circle fa-lg` Version Notice:
116
116
117
-
This declaration creates the following objects on the BIG-IP:
117
+
Support for including an ALG logging profile and log publisher in an FTP profile is available in BIG-IP AS3 3.43 and later.
118
+
119
+
This example shows how you can create an FTP profile in a declaration (the previous example showed how to use an existing FTP profile).
120
+
121
+
See |ftpprofile| in the Schema Reference for more usage options and information.
122
+
123
+
**New in BIG-IP AS3 3.43** |br|
124
+
BIG-IP AS3 3.43 adds the ability to include an :ref:`ALG Log Profile<alglog>` and log publisher to an FTP profile, allowing flexibility when setting logging parameters.
125
+
126
+
.. IMPORTANT:: In the following example, the **algLogProfile** and **logPublisher** properties require the CGNAT module to be provisioned and BIG-IP version to be 15.1 or higher.
127
+
128
+
This declaration creates the following objects on the BIG-IP (**NOTE** If you attempt to use this declaration on an AS3 version prior to 3.43, it will fail. Remove the ALG profile and log publisher for previous versions):
118
129
119
130
- Partition (tenant) named **TEST_FTP_Profile**.
120
-
- A FTP profile named **sampleFTPprofile**
131
+
- An Application named **Application**
132
+
- A virtual server named **service** that references the FTP profile
133
+
- A FTP profile named **sampleFTPprofile** which includes an ALG Log profile and log publisher.
@@ -130,16 +143,27 @@ This declaration creates the following objects on the BIG-IP:
130
143
.. _tftpprof:
131
144
132
145
133
-
Using an existing TFTP profile in a declaration
134
-
```````````````````````````````````````````````
135
-
This example shows how can use TFTP (Trivial File Transfer Protocol) profiles that already exist on your BIG-IP system in a BIG-IP AS3 declaration. The TFTP profile enables you to configure the BIG-IP system to read and write files from or to a remote server. See the |tftpdoc| chapter of the BIG-IP documentation for detailed information.
146
+
Creating a TFTP profile in a declaration
147
+
````````````````````````````````````````
148
+
.. sidebar:: :fonticon:`fa fa-info-circle fa-lg` Version Notice:
149
+
150
+
Support for creating a TFTP profile is available in BIG-IP AS3 3.43 and later.
151
+
152
+
This updated example shows how you can create a TFTP (Trivial File Transfer Protocol) profile in a declaration using BIG-IP AS3 3.43 and later. In previous versions of BIG-IP AS3, you could reference an existing profile, but not create one.
136
153
137
-
See |tftppoint| in the :ref:`Schema Reference<schema-reference>` for usage options.
154
+
The TFTP profile allows you to configure the BIG-IP system to read and write files from or to a remote server. See the |tftpdoc| chapter of the BIG-IP documentation for detailed information.
155
+
156
+
See |tftpp| in the Schema Reference for information on available properties and AS3 usage options.
157
+
158
+
.. IMPORTANT:: In the following example, the **algLogProfile** and **logPublisher** properties require the CGNAT module to be provisioned and BIG-IP version to be 15.1 or higher.
138
159
139
160
This declaration creates the following objects on the BIG-IP:
140
161
141
-
- Partition (tenant) named **Exampe_Service_UDP**.
142
-
- A virtual service named **service** that references an existing TFTP profile on the BIG-IP system.
162
+
- Partition (tenant) named **Example_Service_UDP**.
163
+
- An Application named **Application**.
164
+
- A virtual service named **service** that references the TFTP profile
165
+
- A TFTP profile named **TFTP_profile** with a number of configured properties.
166
+
- An :ref:`ALG Log Profile<alglog>` named **ALG_Log_profile** with a number of configured properties.
This example shows how you can reference an RTSP profile that exists on the BIG-IP system in your declarations. For information on RTSP, see |rtspref|; for information on the RTSP profile, see the |rtspdoc|. You can also see |rtsppt| and |servtcp| in the Schema Reference for usage.
399
+
Creating an RTSP profile in a declaration
400
+
`````````````````````````````````````````
401
+
.. sidebar:: :fonticon:`fa fa-info-circle fa-lg` Version Notice:
402
402
403
-
This declaration creates the following objects on the BIG-IP:
403
+
Support for creating RSTP profiles in a declaration is available in AS3 3.43 and later.
404
+
405
+
This updated example shows how you can create an RTSP profile in a declaration using BIG-IP AS3 3.43 and later. In previous versions of BIG-IP AS3, you could reference an existing profile, but not create one. For information on RTSP, see |rtspref|; for information on the RTSP profile, see the |rtspdoc|.
406
+
407
+
See |rtsp| in the Schema Reference for AS3 options and usage.
408
+
409
+
.. IMPORTANT:: In the following example, the **algLogProfile** and **logPublisher** properties require the CGNAT module to be provisioned and BIG-IP version to be 15.1 or higher.
410
+
411
+
This declaration creates the following objects on the BIG-IP (**NOTE** If you attempt to use this declaration on an AS3 version prior to 3.43, it will fail. Remove the ALG profile and log publisher for previous versions):
404
412
405
413
- Partition (tenant) named **example_RTSP**.
406
-
- A virtual service named **RTSP_vs** which includes the **profileRTSP** property referencing an existing RTSP profile on the target BIG-IP.
414
+
- An Application named **App1**.
415
+
- A virtual service named **RTSP_vs** which references the RTSP profile
416
+
- An RTSP profile named **RTSP_profile** with a number of configured properties.
417
+
- An :ref:`ALG Log Profile<alglog>` named **ALG_Log_profile** with a number of configured properties.
@@ -803,7 +814,7 @@ Configuring a Statistics profile in a declaration
803
814
804
815
Support for Statistics profiles is available in BIG-IP AS3 v3.41 and later.
805
816
806
-
This example shows how you can configure a Statistics profile to the TLS_Server class in a declaration using the new **Statistics_Profile** class.
817
+
This example shows how you can configure a Statistics profile to the TLS_Server class in a declaration using the **Statistics_Profile** class introduced in AS3 3.43.
807
818
808
819
The Statistics profile provides user-defined statistical counters. Each profile contains 32 settings (Field1 through Field32), which define named counters. Using a Tcl-based iRule command, you can use the names to manipulate the counters while processing traffic. For more information, see |stats1| in the BIG-IP documentation and |stats2| in the TMSH reference.
809
820
@@ -824,11 +835,49 @@ This declaration creates the following objects on the BIG-IP:
824
835
825
836
:ref:`Back to top<profile-examples>`
826
837
838
+
|
839
+
840
+
.. _socks:
841
+
842
+
Configuring a SOCKS profile in a declaration
843
+
````````````````````````````````````````````
844
+
.. sidebar:: :fonticon:`fa fa-info-circle fa-lg` Version Notice:
845
+
846
+
Support for SOCKS profiles is available in BIG-IP AS3 v3.43 and later.
847
+
848
+
This example shows how you can configure a SOCKS (Socket Secure) profile in a declaration using the **SOCKS_Profile** class introduced in AS3 3.43.
849
+
850
+
You can use the SOCKS profile to configure the BIG-IP system to handle proxy requests and function as a gateway. By configuring browser traffic to use the proxy, you can control whether to allow or deny a requested connection. For more information on the SOCKS profile, see |socksdocs| in the BIG-IP documentation.
851
+
852
+
See |socksref| in the Schema Reference for options and BIG-IP AS3 usage.
853
+
854
+
This declaration creates the following objects on the BIG-IP:
855
+
856
+
- Partition (tenant) named **Tenant**.
857
+
- An Application named **Application**.
858
+
- A virtual server named **TCP** that references a SOCKS profile.
859
+
- A SOCKS profile named **socksProfile** with a number of properties configured.
Copy file name to clipboardExpand all lines: docs/openapi.yaml
+1-1Lines changed: 1 addition & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
openapi: '3.0.0'
2
2
info:
3
-
version: 3.42.0
3
+
version: 3.43.0
4
4
title: F5 BIG-IP AS3
5
5
description: This reference describes the BIG-IP AS3 API and available endpoints. For more details, see https://clouddocs.f5.com/products/extensions/f5-appsvcs-extension/latest/refguide/as3-api.html
0 commit comments