Applies To:

Show Versions Show Versions

Release Note: BIG-IP GTM and BIG-IP Link Controller version 10.1.0
Release Note

Software Release Date: 12/17/2009
Updated Date: 08/30/2013


This release note documents the version 10.1.0 release of BIG-IP® Global Traffic Manager and BIG-IP® Link Controller®. To review what is new and fixed in this release, refer to New in version 10.1.0 and Fixed in version 10.1.0. For existing customers, you can apply the software upgrade to versions 9.3.x, 9.4.x, 9.6.x, and 10.x. For information about installing the software, refer to Installing the software.

Note: F5 offers general availability releases and general sustaining releases. For detailed information on our policies, refer to Solution 8986, F5 software lifecycle policy, which is available in the AskF5SM Knowledge Base,


- User documentation for this release
- Minimum system requirements and supported browsers
- Supported platforms
- Installing the software
- Upgrading from earlier versions
- New in version 10.1.0
- Fixed in version 10.1.0
- Behavior changes in version 10.1.0
- Known issues
- Contacting F5 Networks

[ Top ]

User documentation for this release

In addition to these release notes, the following user documentation is relevant to this release.

You can find the product documentation and the solutions database in the Ask F5 Knowledge Base.

[ Top ]

Minimum system requirements and supported browsers

The minimum system requirements for this release are:

  • System hard drive
  • 1 GB RAM

Important: You cannot run this software on a BIG-IP 1500 platform with 768 MB RAM. You must upgrade to 1 GB RAM.

Note: You cannot run this software on a CompactFlash® media drive; you must use the system's hard drive.

You can work with the BIG-IP system Configuration utility using the following browsers:

  • Microsoft® Internet Explorer®, version 6.0x, and version 7.0x
  • Mozilla® Firefox®, version 3.0x

Note that we recommend that you leave the browser cache options at the default settings, and disable popup blockers and other browser add-ons or plug-ins.

[ Top ]

Supported platforms

This release supports the following platforms:

  • BIG-IP 1500 (C36) - with 1 GB RAM
  • BIG-IP 1600 (C102)
  • BIG-IP 3400 (C62)
  • BIG-IP 3410 (C100)
  • BIG-IP 3600 (C103)
  • BIG-IP 3900 (C106)
  • BIG-IP 4100 (D46) - unit running Application Security Manager only
  • BIG-IP 4500 (D43) - unit running WebAccelerator System only
  • BIG-IP 6400 (D63)
  • BIG-IP 6800 (D68)
  • BIG-IP 6900 (D104)
  • BIG-IP 8400 (D84)
  • BIG-IP 8800 (D88)
  • BIG-IP 8900 (D106)

If you are unsure which platform you have, look at the sticker on the back of the chassis to find the platform number.

Note: The hardware and software for each unit in a redundant system configuration must match.

[ Top ]

Installing the software

This section lists only the very basic steps for installing the software. The BIG-IP® Systems: Getting Started Guide contains details and step-by-step instructions for completing an installation. F5 recommends that you consult the getting started guide for all installation operations.

Before you begin, ensure that you have completed the following:

  • Reformat for the new 10.1.x partition size (partitions created using version 9.x or 10.0.x do not accommodate the 10.1.x software. ).
  • Reactivate the license and update the service contract.
  • Downloaded the .iso file from F5 Downloads to /shared/images on the source for the operation.
    (If you need to create this directory, use this exact name /shared/images.)
  • Check that the drives have at least minimal formatting.
  • Configure a management port.
  • Set the baud rate to 19200, if it is not already.
  • Log on using the management port of the system you want to upgrade.
  • Log on to an installation location other than the target for the installation.
  • Log on using an account with administrative rights.
  • Save the user configuration set (UCS) in the /var/local/ucs directory on the source installation location.
  • Log on to the standby unit, and upgrade the active unit after the standby upgrade is satisfactory.
  • Turn off mirroring.
  • If you are upgrading from 9.3.x or 9.4.x, run im <downloaded_filename.iso> to copy over the new installation utility.
  • If you are running WAN Optimization Module, set the module's provisioning to Minimum before upgrading.

Installation consists of the following steps.

  1. To copy the upgrade utility, run the command im (for first-time 9.x-to-10.x installation).
  2. To install the software and roll forward the configuration on the active installation location, use one of the following methods:
  • To format for volumes (for fully 10.x environments), run the command:
    image2disk --instslot=HD<n.n> --format=volumes <downloaded_filename.iso>
  • To format for partitions (for mixed 9.x and 10.x environments), run the command:
    image2disk --instslot=HD<n.n> --format=partitions <downloaded_filename.iso>
  • To install from the command line without formatting (not for first-time 10.x installation), run the command:
    bigpipe software desired HD<n.n>version 10.x build <nnnn.n> product BIG-IP
  • To install from the version 10.x browser-based Configuration utility, use the Software Management screens.

After the installation finishes, you must complete the following steps before the system can pass traffic.

  1. Ensure the system rebooted to the new installation location.
  2. Log on to the browser-based Configuration utility.
  3. Run the Setup utility.
  4. Provision the modules.

Each of these steps is covered in detail in the BIG-IP® Systems: Getting Started Guide, and we strongly recommend that you reference the guide to ensure successful completion of the installation process.

The upgrade process installs the software on the inactive installation location that you specify. This process usually takes between three minutes and seven minutes. During the upgrade process, you see messages posted on the screen. For example, you might see a prompt asking whether to upgrade the End User Diagnostics (EUD), depending on the version you have installed. To upgrade the EUD, type yes, otherwise, type no.

To watch an in-progress installation operation, run the command watch b software status, which runs the b software status command every two seconds. Pressing Ctrl+C stops the watch feature.

If installation fails, you can view the log file. For image2disk installations, the system logs messages to the file you specify using the --t option. For other installations, the system stores the installation log file as /var/log/liveinstall.log.

[ Top ]

Upgrading from earlier versions

How you upgrade from earlier versions depends on the version of software you have.

Important: BIG-IP version 10.x introduced the ability to run multiple modules based on platform. The number and type of modules that can be run simultaneously is strictly enforced through licensing. For more information, see SOL10288: Supported product module combinations by platform for the BIG-IP version 10.x software branch.

Upgrading from version 9.6.x or 10.x

When you upgrade from software version 9.6.x or 10.x, you can use the Software Management screens in the Configuration utility to complete these steps. To open the Software Management screens, in the navigation pane of the Configuration utility, expand System, and click Software Management. For information about using the Software Management screens, see the online help, or the relevant chapters in the BIG-IP® Systems: Getting Started Guide.

Upgrading from version 9.3.x or 9.4.x

If you plan to install this version of the software onto a system running 9.3.x or 9.4.x, you must perform a one-time upgrade procedure to make your system ready for the new installation process. When you update from software version 9.3.x or 9.4.x to 10.x, you cannot use the Software Management screens in the Configuration utility. Instead, you must run the image2disk utility on the command line. For information about using the image2disk utility, see the BIG-IP® Systems: Getting Started Guide.

Upgrading from versions earlier than 9.3.x

You cannot roll forward a configuration directly to this version from BIG-IP version 4.x or from BIG-IP versions 9.0.x through 9.2.x. You must be running software version 9.3.x, 9.4.x, 9.6.x, or 10.x. For details about upgrading to those versions, see the release notes for the associated release.

Important: Beginning with version 10.0.0 of the software, a redundant system configuration must contain failover peer management addresses for each unit. If you roll forward a redundant system configuration from 9.3.x or 9.4.x, the units start up in an offline state because each one needs a failover peer management address. To configure the failover peer management addresses, navigate to the Network Failover screen, available under High Availability on the System menu on the navigation pane, and specify the management IP address of the peer unit in the Peer Management Address field. Then do the same on the other unit in the redundant system. Once you specify both IP addresses, the system should operate as expected. For more information, see SOL9947: Change in Behavior: The Peer Management Address setting is required for BIG-IP version 10.x systems configured for network failover.

[ Top ]

New in version 10.1.0

Global Traffic Manager can now respond to DNS queries with DNSSEC-compliant responses
With this release, the new DNSSEC feature allows you to configure the Global Traffic Manager system to respond to DNS queries with DNSSEC-compliant responses. To configure DNSSEC compliance you must have one of the three following types of licensed systems:

  • BIG-IP® Global Traffic Manager license with a DNSSEC add-on license.
  • BIG-IP® Local Traffic Manager Federal Information Processing Standards (FIPS) hardware security module platform license with both BIG-IP® Global Traffic Manager and DNSSEC add-on licenses.
  • Combination BIG-IP® Local Traffic Manager and BIG-IP® Global Traffic Manager license with a DNSSEC add-on license. (Note that this system load balances DNS requests to standard DNS servers, and signs the DNS responses in real-time.)

Geolocation data from Quova, Inc now available with the Global Traffic Manager system
The Global Traffic Manager now uses the GeoPoint database by Quova® to source geolocation data for the origin of a name resolution request. The default database provides data for IPv4 addresses at the continent, country, and state levels. ISP and organization-level data is available when you use the iRules whereis command. You can also purchase database files containing city-level data from F5 Networks.

State parameter added to Topology records
With this release, you can create Global Traffic Manager topology records using State as a value for both the request source and destination statements.

Important: For platform-related or cross-product items, see Release Note: BIG-IP Local Traffic Manager and TMOS version 10.1.0.

Fixed in version 10.1.0

This release lists no specific fixes because it is a zero-level release.

Behavior changes in version 10.1.0

Communication between BIG-IP or 3-DNS version 4.x and version 10.1.0 or later
A 3-DNS® Controller or BIG-IP® system running version 4.x cannot communicate with BIG-IP® systems configured with version 10.1.0 or later. For more information, see SOL11106: Change in Behavior: iQuery communication is not supported between BIG-IP or 3-DNS version 4.x and BIG-IP LTM or GTM version 10.1.0 or later

[ Top ]

Known issues

This release contains the following known issues.

[Global Traffic Manager] Enable/disable object status (CR92216)
Occasionally, changes to object status (specifically, enable/disable) you make using the browser-based Configuration utility do not always immediately reflect in the Configuration utility. The corresponding config file (for example, wideip.conf) is correctly modified, but the object's visual status might remain in its previous state.

[Global Traffic Manager] Format of Unknown string behavior change (CR101680)
The system now returns a consistent Unknown string for continent and country tags for the IP Classifier or file. Previously, the system returned UNKNOWN for unknown country codes and unknown for unknown continent codes. This might impact you if you are using the whereis iRule command for the Global Traffic Manager.

[Global Traffic Manager] Monitor timeout and changing timeout values (CR101679)
If you have a large configuration, and you change a monitor's timeout and interval values at the same time, the system might report hosts changing to a down state immediately followed by an up state. In general it is best to change either the timeout or interval, but not both simultaneously. If you plan to use bigger values, change the timeout first. If you plan to use smaller values, change the interval first. In each case, always allow for a full configuration propagation in between changes.

[Global Traffic Manager] ?Active? string in command line prompt (CR106291)
When you load a large configuration, the command line prompt might change to ?Active?. Pressing return resets the prompt to Active, as expected.

[Global Traffic Manager] Translated IP and Port (CR113989)
Using the Traffic Management Shell (tmsh), it is possible to add only a translated IP address or only a translated port, rather than specifying both values together. If you only specify one, the system does not save the configuration, and uses 0 (zero) as the port. The workaround is to change the port, define the IP address, and then set the port to the value you want to use.

[Global Traffic Manager] mprov logging errors in /var/log/gtm (CR112754)
When you use the bigpipe utility or the tmsh utility to set provisioning, make sure to wait a minimum of 30 seconds (more, if you are provisioning several modules) before issuing any other provisioning command. If you do not, the system could end up misconfigured, which requires a full reboot to correct.

[Global Traffic Manager] Operator role and enable/disable pool members (CR111032)
Users with the Operator role can now use the interactive command line to enable and disable pool members. However, users with the Operator role cannot use the edit command to perform the same functions, because there is no way to determine what part of the configuration is legitimate for the Operator user to edit.

[Global Traffic Manager] Data centers across gateways (CR110976)
If you configure two data centers, one with a default gateway pool and links to another subnet, and the other with no links to another subnet, the system might show incorrect status until it resolves all the input from the links. In that case, you might see the following error message in the /var/log/gtm log:

Nov 3 11:28:22 local/gtm3603 crit gtmd: 011a1002:2: Can not find GATEWAY target member for pool default_gateway_pool

Although there is no workaround for this issue, the systems eventually sort out the conflicts and mark all objects up.

[Global Traffic Manager] Upgrade and sync groups (CR103265)
If you are upgrading from 9.2.x, and you have a Global Traffic Manager unit that belongs to a sync group, you must remove the unit from the sync group before you install the software or apply the upgrade. Failure to do so may cause irrevocable damage to the units in the sync group that are running older versions of the software. Once you have upgraded all units to the same version, you can then re-create the sync group. For details on removing a unit from a sync group, see the product documentation. Once you have removed the unit from the sync group, you can proceed with the installation or upgrade. Note that this is for upgrades from 9.2.x only.

[Global Traffic Manager] FTP monitor and multi-line responses (CR104562)
The Global Traffic Manager FTP monitor does not handle multi-line responses correctly. If an FTP server uses multi-line responses, you might encounter undefined behavior, which could include monitor flapping or consistent monitor failure.

[Global Traffic Manager/Link Controller] Licensing for Global Traffic Manager or Link Controller only (CR107158)
When you install the software for a Global Traffic Manager only or Link Controller only, the system reports provisioning only for Local Traffic Manager, even though the Global Traffic Manager and Link Controller menus are active. Before you can use Global Traffic Manager or Link Controller, you must open the Resource Provisioning screen on the System menu in the navigation pane, and provision Global Traffic Manager or Link Controller.

[Global Traffic Manager] Routing domains and Global Traffic Manager (CR107402)
Routing Domains are supported on internal interfaces only when there is a Global Traffic Manager system on the network and monitoring the Local Traffic Manager system. Routing Domains are supported on internal and external interfaces (virtual servers, self IP addresses, and so on) when there is Global Traffic Manager in the network or the operator decides not to monitor that Local Traffic Manager. Note that there is nothing in the software to prevent you from configuring Routing Domains on both the internal and external interfaces when there is a Global Traffic Manager system on the network. Therefore, it is the system administrators' responsibility to ensure the proper configuration for their network environment. Also note that Routing Domains are not supported on a Local Traffic Monitor system that is also running the Global Traffic Monitor product module.

[Global Traffic Manager/Link Controller] Roll forward from 9.x and Application Security Manager and Global Traffic Manager provisioning (CR120828)
When you roll forward a 9.x user configuration set (UCS) file that is configured for Application Security Manager and Global Traffic Manager, provisioning for Global Traffic Manager is not enabled. To enable Global Traffic Manager using the browser-based Configuration utility, in the navigation pane, expand System, and click Resource Provisioning. In the Module Resource Provisioning section, select the provisioning level you want from the Global Traffic (GTM) and Link Controller (LC) drop-down lists.

[Global Traffic Manager/Link Controller] Object enable and disable and screen refresh (CR125781)
The system can encounter a race condition in which the screen does not correctly register the state when you enable and disable objects. The work around is to manually refresh the page.

[DNSSEC] Repeat key create and sync (CR127441)
Using the Repeat button to create keys can cause a race condition in the syncing mechanism that results in the key not being created on the peer. The workaround is to add the next object once you see the generation object appear.

[DNSSEC] 4096 bit keys and FIPS (CR131190)
Federal Information Processing Standards (FIPS) does not support a key size of 4096. You can use FIPS with a smaller key size.

[DNSSEC] Intermittent err mcpd[3259] message (CR132153)
You might intermittently see the message err mcpd[3259]: 010712d7:3: DNSSEC Key Generation transaction failed with exception for [Can't save/checkpoint DB object, class:gtm_dnssec_key_generation status:13] in generation_create_cb. This error message is benign, and you can safely ignore it.

[Global Traffic Manager/Link Controller] Limit on length of object names (CR133288)
In order to display status or statistics for the following objects, their names can be no longer than 63 characters:

  • Data centers
  • Servers
  • Pools
  • Pool members
  • Links

Objects whose names are longer than 63 characters remain in the unknown (blue) state. Additionally, you cannot view statistics for the object. Previous releases did not have this object name limit. For more information, see SOL10871: BIG-IP GTM reports a status of Unknown and is unable to retrieve statistics for objects configured with a name longer than 63 characters.

[Global Traffic Manager] Empty region string (CR138719)
If you create a Region that has no member criteria, the system matches every region. To work around this issue, always specify at least one Member Type for the Member List.

[ Top ]

Contacting F5 Networks

  Phone: (206) 272-6888
Fax: (206) 272-6802

For additional information, please visit

Was this resource helpful in solving your issue?

NOTE: Please do not provide personal information.

Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)