CGNAT infrastructure

The Carrier-Grade Network Address Translation (CGNAT) product builds upon functionality in BIG-IP systems, and addresses the IPv4 address depletion problem by extending IPv4 address space and providing an evolutionary transition to IPv6. CGNAT capabilities in the BIG-IP system provides an application-aware, high-performance, flexible, and highly scalable solution to IPv4-to-IPv6 transition and interoperability.

Advance Routing Module support for ECMP

Equal-cost multi-path routing (ECMP) is a routing mechanism for routing traffic flow along multiple paths of equal cost, with the goal of achieving equally-distributed link load sharing. By load balancing traffic over multiple paths, ECMP offers potential increases in bandwidth, as well as some level of fault tolerance when a path on the network becomes unavailable.

Bidirectional Forward Detection (BFD)

With Bidirectional Forward Detection (BFD), an administrator can use a single method to check for failure over any media, even those which lack failure detection. The centralized, consistent method facilitates network planning and profiling.

HTTP content adaption

The BIG-IP system now includes support for HTTP content adaptation, using the industry-standard Internet Content Adaptation Protocol (ICAP). When you add a new Internal type of virtual server, along with some content adaptation profiles and a pool of ICAP servers, to your configuration, the BIG-IP system can adapt the content of any HTTP request or response before forwarding the request or response to its destination. Sample uses of HTTP content adaptation are to perform virus scanning or content filtering.

SPDY profile

With a special Early Access license, this release provides a Local Traffic Manager SPDY profile that you can use for evaluation and testing. This version of the SPDY profile is not intended for production use. Documentation for the options and settings of this profile can be found in the respective Traffic Management Shell (tmsh) man pages, the Traffic Management Shell (tmsh) Reference Guide, and the accompanying SPDY Implementations reference. Should you encounter any problems with this functionality, please contact your F5 Networks representative. Resolution of any software defects found in this version may appear in a future release. To acquire an Early Access license and the SPDY Implementations reference, please contact your F5 Networks account executive.

SSL Forward Proxy

By enabling the BIG-IP system to act as a SSL Forward Proxy, the BIG-IP system can decrypt outgoing SSL traffic, analyze and log the contents, manage traffic, and make use of web acceleration. Added benefits include default-deny SSL-certificate handling, CA white lists, and web certificate decision making. (Note: To take advantage of the additional benefits requires third-party subscription services, as well as the use of iRules or configuration of ICAP support.)

Unified logging framework extensions

With the new unified logging feature, you can send logs from all BIG-IP products to a central location. The logs can be stored on the BIG-IP system and accessed using MySQL, or sent to remote high-speed log servers, such as Remote Syslog, ArcSight, or Splunk.

Bandwidth Controller (BWC)

Assign a bandwidth ceiling and enforcement to applications, interfaces, subscribers, and subscriber groups with the bandwidth controller (BWC). With BWC, a large number of session bandwidths can be managed fairly, while maintaining quality of service (throughput, number of connections, number of sessions).

Bandwidth limits per route domain

The Bandwidth Controller added in 11.3.0 provides the ability to set granular bandwidth levels on a number of attributes including route domain. This provides the ability to define quality of service to ensure service-level agreements (SLAs) can be defined and met.

ICMP response configuration on a per-virtual server basis

You can now configure whether or not a virtual server responds to ping commands. Ping operates by sending Internet Control Message Protocol (ICMP) echo request packets to the target host and waiting for an ICMP response. With this functionality, you can control the network visibility of your applications.

Mgmt interface support for DHCP

Deploying Dynamic Host Configuration Protocol (DHCP) on the management port allows automatic IP address configuration and connection, enabling automation of BIG-IP deployment.

IP Tunnel support per route domain

Tunnel endpoint addresses can be configured with a route domain beyond the default. Additionally, the interface representing the tunnel can be added to a route domain. The route domain of the interface need not match that of the tunnel endpoint addresses. This allows inner traffic and outer traffic to belong each to a different route domain. This change only applies to IPIP, GRE, and EtherIP tunnels.

Transparent tunneling support

Transparent tunnels give the BIG-IP system the ability to inspect and/or manipulate encapsulated traffic that is flowing through a BIG-IP system, while presenting the illusion that the traffic flows through the device undisturbed.

Ratio based load balancing with CARP persistence

Cache Array Routing Protocol (CARP) Persistence now leverages pool member ratio to enhance traffic distribution to heterogeneous server pools. Administrators can direct more traffic to more capable servers. The pool member's ratio is considered when calculating the hash value in the CARP mode of hash persistence.

2000s/2200s/10200v Platforms

This release features support for the 2000s, 2200s and the 10200v platforms, appliance platforms which are key to F5's Intelligent Services Platform delivering industry leading application level performance and flexible scale to enable organizations of all sizes to deploy and consolidate advanced application delivery services. For more information, see Platform Guide: 2000s / 2200s and Platform Guide: 10200v.

VIPRION C4800 Platform

This release features support for the VIPRION C4800 Chassis Platform which is a new 8-blade chassis supporting the recently announced B4300 blades. The C4480 doubles the intelligent on-demand scale of the previous VIPRION C4480 chassis. For more information, see Platform Guide: VIPRION 4800.

Hyper-V hypervisor support

This release provides full support for Hyper-V, a native hypervisor that enables platform virtualization on x86-64 system.

KVM hypervisor support

This release provides full support Kernel-based Virtual Machine (KVM), a virtualization infrastructure for the Linux kernel.

BIG-IP 4000 platform

This release provides support for the new BIG-IP 4000 platform. The 4000 platform is a new design providing leading price/performance, as well as leading performance/watt-saving on datacenter power and cooling costs in a 1U form factor. For more information, see Platform Guide: BIG-IP 4000 platform.

Consolidated sync status for Device Service Clustering (DSC)

This release provides a single BIG-IP Configuration utility Overview screen to quickly view sync status for all device groups defined on the BIG-IP system. For each device group, you can determine whether a config sync is required, view the recommended sync action, and sync the BIG-IP configuration among device group members. In general, you can easily manage config sync tasks for all device groups at a glance, from a single location in the BIG-IP Configuration utility.

Connection rate limit per virtual server, pool member, or node

In this release, you can configure a connection rate limit per virtual server, pool member, or node. A virtual server, pool member, or node can prevent an excessive number of connection requests during events such as a Denial of Service (DoS) attack or a high-demand shopping event. When you specify a connection rate limit, the system controls the number of allowed new connections per second, thus providing a manageable increase in connections without compromising availability. You can find the options: Connection Rate Limit, Connection Rate Limit Mode, Connection Rate Limit Source Mask, and Connection Rate Limit Destination Mask on the configuration and properties screens for Virtual Servers, and the Connection Rate Limit option on a pool member's properties screen, as well as the configuration and properties screens for Nodes. Online help provides additional information about functionality.

Diffie-Hellman SSL key exchange cipher

The Diffie-Hellman SSL key exchange cipher, which provides perfect forward secrecy (PFS), is now included natively. This provides better performance for configurations using Diffie-Hellman, especially on physical platforms that have hardware SSL acceleration.

Serial output logging

Always-On Management (AOM) version 10.1.13 now saves the recent contents of serial output from the host across host reboots, even when no serial console is attached. The system writes contents to log files on both the AOM and the host, either after a host reboot/power event or at a user's request. Note that this feature is not enabled by default. To enable it, you must manually change and restart the hostconsh script.

Google Chrome support

This release provides full support for current releases of the Google Chrome browser.

SPDY profile

With a special Early Access license, this release provides a Local Traffic Manager SPDY profile that you can use for evaluation and testing. This version of the SPDY profile is not intended for production use. Documentation for the options and settings of this profile can be found in the respective Traffic Management Shell (tmsh) man pages, the Traffic Management Shell (tmsh) Reference Guide, and the accompanying SPDY Implementations reference. Should you encounter any problems with this functionality, please contact your F5 Networks representative. Resolution of any software defects found in this version may appear in a future release. To acquire an Early Access license and the SPDY Implementations reference, please contact your F5 Networks account executive.

BEAST Exploit protection

In this release, TLS 1.1 support in hardware, provides additional protection against the BEAST Exploit vulnerability found in SSL 3.0/TLS 1.0.

IPv6 standards compliance

In this release, the BIG-IP IPv6 standards compliance has been improved.

DSC debugging tools

In this release, the cm module of tmsh includes a number of powerful tools for viewing information and statistics about the BIG-IP system and the traffic and device groups you have configured.

Transitioning between IP infrastructure supported

In this release, for L3 encapsulation tunnels, the BIG-IP system now supports mixed address types, that is, IPv6-in-IPv4 and IPv4-in-IPv6 encapsulations for transitioning between IP infrastructure. These mechanisms are represented by RFC4213 and RFC2473, respectively.

Terminating IPIP encapsulation tunnels supported

In this release, the BIG-IP system can now terminate encapsulation tunnels originating from third party devices, without you having to specify the IP address for every device.

DNS cache

In this release, you can configure a cache on the BIG-IP system to cache DNS responses. The next time the system receives a query for a response that exists in the cache, the system returns the response from the cache.

Customized SNMP MIBs

In this release, the BIG-IP system supports the creation of customized MIB entries using TCL commands to provide visibility to statistics and information that are not available through standard MIBs.

DHCP Relay renewal forwarding

In this release, DHCP Relay renewal traffic is handled by the DHCP Relay profile.

sFlow support

In this release, you can configure the BIG-IP system to poll internal data sources and send data samples to an sFlow receiver. (Currently, the BIG-IP system supports only counter sampling on only VLANs and interfaces.) You can use the collected data to analyze the performance of the BIG-IP system.

Provisioning and device version requirements for iApp templates

iApp templates can now check for installed BIG-IP modules, as well as set minimum and maximum BIG-IP versions, and warn users of missing modules and incompatible version use before deploying the template as an application service. Template authors can specify the required BIG-IP modules and the minimum and maximum BIG-IP versions in the Template Properties screen of the Configuration utility. Template validity is also indicated in the Validity column of the Template List.

Diameter monitor enhanced

In this release, enhancements have been made to improve Diameter monitor operation. To support graceful shutdown of a Diameter monitor session, a DPR is now sent after a CEA is received. If a CEA is not received, the BIG-IP system tears down the connection and does not send a DPR. From the BIG-IP system's point of view, the server is down. To resolve conflicts between active and standby units if the end-user configured origin-host creates conflicts, the BIG-IP system now adds the local box host name according to user configuration. The unique origin-host prevents detecting the wrong status caused by two units using the same origin-host because the server may accept only one connection from a single origin-host.

SCTP remote multi-homing

In this release, BIG-IP software supports SCTP remote multi-homing with multiple IP address for a single connection.

TCL packages for iApps and tmsh scripts

In this release, the BIG-IP system includes some common TCL packages. The iApps and tmsh scripts are now extensible through the standard TCL mechanisms. Note that these libraries are not available for use in iRules.

LDAP authorization enhanced to search for group membership

In this release, you can use LDAP membership as a part of remote role determination when you are assigning a role to a user of the BIG-IP system.

IPv6 support for the management port

In this release, you can use IPv6 addresses for the BIG-IP system management interface.

Private per-object metadata

In this release, using tmsh or iControl, you can define metadata and retrieve user-defined metadata for certain BIG-IP LTM and GTM configuration objects, including virtual addresses and iApp application services. This metadata is in the form of a string key-value pair, as well as a Boolean value that indicates whether the key should be persisted or is ephemeral.

Memory usage improvement

In this release, the BIG-IP system Configuration utility memory usage has been improved.

SCTP support

In this release, the BIG-IP system supports SCTP per RFC 2960.

B4300 enhancement

In this release, vCMP Guest access to hardware SSL and compression resources has been enhanced on the B4300 blades.

HTTP to HTTPS redirect option for the Configuration utility

In this release, you can configure the BIG-IP system to redirect HTTP requests for the BIG-IP system Configuration utility to HTTPS.

BIG-IP IPsec certification

For this release, BIG-IP IPsec was certified by ICSA. iControl now supports IPsec.

VMware vCloud Director support

In this release, BIG-IP Virtual Edition supports VMware vCloud Director.

% notation hiding on default RD-enabled

The BIG-IP route domains feature includes the concept of default route domains, to minimize the need for you to specify the %<ID> notation. When you designate a route domain as the default route domain in a partition, any BIG-IP system objects (such as node addresses) in that partition that do not include the %<ID> notation in their IP addresses are automatically associated with the default route domain.

iRules support for protocols with separate data channel

In this release, you can specify existing iRules that you want the virtual server to apply to the data channel of FTP or RTSP traffic. Additionally, this feature can provide byte counts for all of the supported protocols (FTP, RTSP, and so on) that have either separate data channels or hierarchically organized data channels. This feature is available when you have assigned an FTP or RTSP profile to a virtual server.

Targeted traffic group failover

When you force a traffic group into a standby state, you can choose the specific device to which the traffic group fails over, if the device group has more than two members. Forcing a traffic group into a standby state causes the traffic group to become active on the selected device.

Multiple route domains for Advanced Routing Modules supported

In this release, for each route domain on the BIG-IP system (including route domain 0), you can enable one or more dynamic routing protocols. For example, you can enable BGP4 and OSPFv3 on a specific route domain. When you enable dynamic routing on a specific route domain, the BIG-IP system creates a dynamic routing instance. This dynamic routing instance is made up of the core dynamic routing daemons (imi and nsm), as well each relevant dynamic routing protocol daemon.

SIP OneConnect

In this release, the SIP OneConnect feature allows connection flow reuse between inbound and outbound virtual servers for UDP connections. This feature addresses common SIP client behavior where source and destination ports are both 5060. See the BIG-IP LTM Concepts Guide for more details about how to implement SIP OneConnect.

IP intelligence

In this release, you can use iRules to determine the reputation of an IP address and operate based on that reputation. The IP reputation database is regularly updated, and contains the following categories:

• Windows Exploits: IP addresses that have exercised various exploits against Windows resources using browsers, programs, downloaded files, scripts, or operating system vulnerabilities.
• Web Attacks: IP addresses that have launched web attacks of various forms.
• Botnets: IP addresses representing compromised computers on the Internet that are now part of a botnet (machines that send spam messages, launch various attacks, or behave in other unpredictable ways).
• Scanners: IP addresses that have been observed to scan ports or networks, typically to identify vulnerabilities for subsequent exploits.
• Denial of Service: IP addresses that have launched denial of service attacks, often requests for legitimate services, but which occur at such a fast rate that targeted systems cannot respond and become overloaded or unable to service legitimate clients.
• Reputation: IP addresses that issue HTTP requests with a low average reputation, or that request only known malware sites.
• Phishing: IP addresses associated with phishing websites (sources that attempt to acquire information such as user names, passwords, and credit card details by masquerading as a trustworthy entity).
• Proxy: IP addresses associated with web proxies, which can be used to conceal an attacker's identity.
• Network: Networks (/24) in which the majority of IP addresses have exhibited suspicious behavior.

You can configure the system to reject a request from IP addresses in a specific reputation category. To enable this feature, run the command tmsh modify sys db iprep.autoupdate value enable. To disable this feature, run the command tmsh modify sys db iprep.autoupdate value disable. To look up the reputation of a specific IP address, run the command iprep_lookup <IP address>. For this release, only IPv4-formatted IP addresses are supported. A free 30 day evaluation of the IP intelligence service is available.

IPv6 to IPv4

In this release, you can configure the BIG-IP Local Traffic Manager (LTM) to load balance IPv6-only client connection requests to IPv4-only servers on your network by returning an AAAA record response to the client.

Route Domains for IPv6

In this release, Route Domains support IPv6, providing the same capabilities of IPv4, including strict isolation between route domains and overlapping IP addresses, as well as support of a single route domain for both IPv4 and IPv6 virtual servers in the same route domain.

Analytics Enhancements

Virtual Edition

This release adds Microsoft Hyper-V (Lab only) and Citrix XenServer support in addition to VMware vSphere for all BIG-IP Virtual Editions (Local Traffic Manager, Access Policy Manager, Application Security Manager, Edge Gateway, Global Traffic Manager, WebAccelerator, and WAN Optimization Manager).

iRule Commands Referencing External Files (iFiles)

In this release, you can use an iRule to get external content or files and present the results.

Digitally Signed iRules

In this release, you can digitally sign iRules, providing the ability to verify that an iRule has not changed since it was signed by the author. You can now verify downloaded and imported iRules, as well as iRules that are deployed across an organization. If the verification test fails, the iRule will not load, thus protecting the user from any unknown changes. If necessary, a user can override this option and load the iRule even if verification fails.

iRule Editor Role

In this release, an iRule Editor Role provides the ability to create and modify new iRules, while preventing the ability to assign an iRule to a new virtual server unless that iRule was previously assigned.

Cryptographic Operations for iRules

In this release, iRules support encryption and decryption of data that is compatible with external devices. iRules support includes the following ciphers:

• RC4
• DES
• 3DES
• AES

DNS iRules

DNS iRules provide fully customizable intelligent DNS. The new DNS iRules commands are applied to the DNS listener and triggered by the DNS_REQUEST and DNS_RESPONSE events. They require a DNS profile and are enabled as part of the Global Traffic Manager module or the new DNS add-on bundle for Local Traffic Manager. DNS iRules adds commands useful for modifying and inspecting DNS packets. Capabilities include: manipulating (read/modify) DNS queries, DNS resource records (RR), and DNS responses. Additional commands provide the ability to control DNS flow by dynamically enabling and disabling DNS features. DNS iRules make it easy to implement DNS filtering, query logging, and other DNS firewall use cases.

You can find extensive information about iRules on the F5 DevCentral web site.

Link Layer Discovery Protocol

SSL SAN Certificates

In this release, you can manage SSL Certificates by means of TMSH and the BIG-IP Configuration utility.

Transport Layer Security Server Name Indication

This release supports Transport Layer Security (TLS) Server Name Indication (SNI) in the SSL Stack.

TMSH Shared Alias File

In this release, aliases are stored in the configuration, making content accessible to other users on the BIG-IP system. You can create aliases for scripts or define a standard for consistent use.

BIG-IP nPath Encapsulation Tunneling to Pool Members

In this release, you can establish encapsulation tunnels from a BIG-IP system to backend pool members. This is an enhancement to nPath. We now offer IP Tunnel (L3) Encapsulation in nPath to pool members. This functionality supports IPv4 and IPv6 addresses. You can configure BIG-IP Encapsulation Tunneling by means of TMSH and iControl, enabling encapsulation for a pool and disabling encapsulation by pool member.

Dynamic Host Configuration Protocol Relay

In this release, the BIG-IP system introduces the Dynamic Host Configuration Protocol (DHCP) Relay virtual server, providing the ability to proxy DHCP requests between VLANs.

Jumbo Frame Support

This release provides 1800-byte frame support on: BIG-IP 3900, 6900, 89x0, and 110x0 platforms, and on B4100 (PB100) and B4200 (PB200) blades. This release also provides 9198-byte frame support on B2100-bladed BIG-IP 2400 chassis.

NTLM/NTLMv2 Authentication Support for HTTP/HTTPS Monitors

Device Service Clustering

In this release, the Traffic Management Operation System (TMOS) within the BIG-IP system includes an underlying architecture that allows you to create an N+1 redundant system configuration, known as device service clustering (DSC). This redundant system architecture provides both synchronization of multiple BIG-IP configuration data and high availability at user-defined levels of granularity.

iApps

In this release, you can create customized templates to quickly and easily deploy applications on your network. iApps allow creation of application-centric configuration interfaces on BIG-IP systems, reducing configuration time and increasing accuracy of complex traffic management configurations.

Analytics

This release provides Analytics, a module that provides application visibility and reporting capabilities. Using this module, you can analyze performance of web applications by viewing detailed metrics for applications, virtual servers, pool members, URLs, and specific countries. You can also view detailed statistics about application traffic running through the BIG-IP system.

Diameter Enhancements

In this release, BIG-IP Local Traffic Manager (LTM) load balances and persists requests that applications send to servers running Diameter services. The BIG-IP system can also monitor each server to ensure that the Diameter service remains up and running.

IPv4-to-IPv6 Gateway

In this release, BIG-IP LTM functions as an IPv4-to-IPv6 gateway. You configure the radvd service to send out ICMPv6 routing advisory messages, and to respond to ICMPv6 route solicitation messages. This allows the BIG-IP system to support auto-configuration of downstream nodes, and the downstream nodes to automatically discover that the BIG-IP system is their router. Note that in version 11.1.0 and later, the radvd daemon has been removed and its functionality moved into TMOS. That means that instead of configuring the radvd daemon, you configure route advertisements using tmsh. See the 'net router-advertisement' section of the tmsh manual or the tmsh command-line help for information.

TCP Request Queuing in Pools

In this release, TCP request queuing provides the ability to queue connection requests that exceed the capacity of connections for a pool, pool member, or node, as determined by the connection limit. Consequently, instead of dropping connection requests that exceed the capacity of a pool, pool member, or node, TCP request queuing enables those connection requests to reside within a queue in accordance with defined conditions until capacity becomes available.

Certificate Administrator Role

This release provides a Certificate Administrator Role. A user that is assigned this role can only manage SSL certificates.

Per Module Statistics

In this release, you can view "real-time" CPU and memory usage statistics for individual modules.

Per Virtual Server Statistics

In this release, you can view "real-time" profile and CPU usage statistics for individual virtual servers.

Out of Band TCP Connections

This release provides the ability to establish out of band TCP Connections from an iRule.

Read and Write Access to TCP Options

This release provides read and write access to the TCP options field using iRules.

You can find extensive information about iRules on the F5 DevCentral web site.

SNMP Support for Dynamic Routing Protocols

This release provides SNMP support for ZebOS dynamic routing protocols.

tmsh Description Field for Configurable Components

In this release, there is a Description field available for configurable tmsh components.

TLS 1.2 Support

This release supports Transport Layer Security (TLS) 1.2, the SHA 2 Cipher, and SHA256 hash.

Request Logging Profile

The new Request Logging profile enables configuration log entries to be reported when requests/responses are received, supports audit logging of HTTP/decrypted HTTPS requests/responses, and enables specification of a response to be issued when an specific requests/responses occur. For example, the system uses this response when you enable Respond On Error to suggest a retry, or to redirect the browser to an alternate page. Although there are no specific examples in the online help that describe how to craft Template and Error Template entries, you can find a table of supported parameters in the BIG-IP WebAccelerator System: Implementations guide on AskF5.

Version 11.0.0 Documentation

This release provides an enhanced documentation paradigm for Local Traffic Manager, Global Traffic Manager, and Link Controller. Concept guides and implementation guides replace the former configuration guides. This change helps make information more accessible and more task-focused, which improves the user experience and enhances usability.

Proxy SSL Support

This release provides Proxy SSL support in Client SSL and Server SSL profiles, which enables direct client-server authentication. You can find information about Proxy SSL in the Big-IP Local Traffic Manager: Implementations guide on AskF5.

Upgrading from version 10.1.0 (or later) or 11.x

When you upgrade from version 10.1.0 (or later) or 11.x software, you use the Software Management screens in the Configuration utility to complete these steps. To open the Software Management screens, in the navigation pane of the Configuration utility, expand System, and click Software Management. For information about using the Software Management screens, see the online help.

Upgrading from versions earlier than 10.1.0

You cannot roll forward a configuration directly to this version from BIG-IP version 4.x, or from BIG-IP versions 9.0.x through 9.6.x. You must be running version 10.1.0 software. For details about upgrading to those versions, see the release notes for the associated release.

Automatic firmware upgrades

If this version includes new firmware for your specific hardware platform, after you install and activate this version, the system might reboot additional times to perform all necessary firmware upgrades.

Upgrade to a hotfixed version 11.x

First apply a hotfix published after 12/17/2012 to the existing vCMP guest. To download a hotfix:

1. Navigate to the F5 Downloads site (https://downloads.f5.com ).
2. Select the hotfix file (published after 12/17/2012) for your configuration.
3. Apply the hotfix using the System > System Management > Hotfix List screen,
4. Retry the version 11.3.0 installation.

Get an IM patch file

If there is no applicable hotfixed version in which this problem is resolved, you can download a fix. The patch fix file name is patch.406748.im. To apply the patch:

1. Navigate to the F5 Downloads site (https://downloads.f5.com ).
2. Download the fix file to the BIG-IP system.
3. In a shell on the BIG-IP system, run the command im patch.406748.im.
4. Reboot the BIG-IP system.
5. Retry the version 11.3.0 installation operation.

Additional resources

You can find additional support resources and technical documentation through a variety of sources.

• The F5 Networks Technical Support web site: http://www.f5.com/support/
• The AskF5 web site: http://support.f5.com/kb/en-us.html
• The F5 DevCentral web site: http://devcentral.f5.com/
• AskF5 TechNews

F5 Networks Technical Support

Free self-service tools give you 24x7 access to a wealth of knowledge and technical support. Whether it is providing quick answers to questions, training your staff, or handling entire implementations from design to deployment, F5 services teams are ready to ensure that you get the most from your F5 technology.

AskF5

AskF5 is your storehouse for thousands of solutions to help you manage your F5 products more effectively. Whether you want to search the knowledge base periodically to research a solution, or you need the most recent news about your F5 products, AskF5 is your source.

F5 DevCentral

The F5 DevCentral community helps you get more from F5 products and technologies. You can connect with user groups, learn about the latest F5 tools, and discuss F5 products and technology.

AskF5 TechNews

Weekly HTML TechNews

The weekly TechNews HTML email includes timely information about known issues, product releases, hotfix releases, updated and new solutions, and new feature notices. To subscribe, click TechNews Subscription, fill out the required fields, and click the Subscribe button. You will receive a confirmation. Unsubscribe at any time by clicking the Unsubscribe link at the bottom of the TechNews email.

Periodic plain text TechNews

F5 Networks sends a timely TechNews email any time a product or hotfix is released. (This information is always included in the next weekly HTML TechNews email). To subscribe, send a blank email to technews-subscribe@lists.f5.com from the email address you would like to subscribe with. Unsubscribe by sending a blank email to technews-unsubscribe@lists.f5.com.