Software Release Date: 02/22/2006
Updated Date: 12/11/2013
This release note documents the version 9.2.3 feature release of BIG-IP® Global Traffic Manager, and the BIG-IP® Link Controller. To review the features in this release, see Features in this release. For existing 3-DNS Controller customers, you can apply the Global Traffic Manager upgrade to systems running 3-DNS® Controller version 4.5 PTF-04 through version 4.5.13, and version 4.6 through version 4.6.4. For existing Link Controller customers, you can apply the Link Controller upgrade to systems running Link Controller version 4.5 PTF-04 through version 4.5.13, and version 4.6 through version 4.6.4. For information about installing the upgrade, please refer to Installing the software.
Note: F5 now offers both feature releases and maintenance releases. For more information on our new release policies, please see New Versioning Schema for F5 Software Releases.
The minimum system requirements for the Global Traffic Manager for this release are:
The minimum system requirements for the Link Controller for this release are:
[ Top ]
The Configuration utility (graphical user interface) supports the following browsers:
Note that we recommend that you leave the browser cache options at the default settings.
Important: Popup blockers and other browser add-ons or plug-ins may affect the usability of the Configuration utility. If you experience issues with navigation, we recommend that you disable these types of browser plug-ins and add-ons.
This release applies only to the supported platforms listed below; each one provides all minimum system requirements. This release supports the following platforms:
Warning: If you plan to upgrade a system licensed for Link Controller (LC), Global Traffic Manager (GTM), or a combination Local Traffic Manager and Global Traffic Manager system, the BIG-IP unit you intend to upgrade must have a minimum of 768 MB of RAM. Originally, the BIG-IP 1000 (D39) and BIG-IP 2400 (D44) platforms were shipped with 512 MB of memory only.
If you are unsure of which platform you have, look at the sticker on the back of the chassis to find the platform number.
There are several installation options to consider before you begin the version 9.2.3 software installation. Before you begin the installation process, you need to determine which installation option is appropriate.
Warning: A valid service contract is required to complete this upgrade.
Warning: The system to which you install the Global Traffic Manager or Link Controller must have at least 768MB of RAM.
Warning: You must reactivate the license on the BIG-IP system you intend to upgrade before you begin the upgrade.
Warning: You must turn off mirroring before you attempt to upgrade to version 9.2.3. Mirroring between units with previous versions of the BIG-IP software installed and version 9.2.3 is not supported.
Important: You are prompted to install the software on multiple boot images if the unit supports the multiple boot option. The BIG-IP 1500 (C36), BIG-IP 3400 (C62), BIG-IP 6400 (D63), and BIG-IP 6800 (D68) platforms support this functionality.
Important: You must perform the installation from the management interface (Management) on the BIG-IP system.
Important: You should perform the installation on the standby system in a redundant system. If you are satisfied with the results, initiate a failover and apply the upgrade to the other unit in the redundant system.
Important: We recommend that you run the MD5 checksum on any ISO image or IM upgrade file you download. For information about MD5 checksums, see Verifying the MD5 Checksum of the upgrade file.
Important: If you are upgrading from 9.2.x, and you have a Global Traffic Manager unit that belongs to a sync group, you must remove the unit from the sync group before you install the software or apply the upgrade. Failure to do so may cause irrevocable damage to the units in the sync group that are running older versions of the software. Once you have upgraded all units to the same version, you can then re-create the sync group. For details on removing a unit from a sync group, see the product documentation. Once you have removed the unit from the sync group, you can proceed with the installation or upgrade. Note that this is for upgrades from earlier versions of 9.2.x only.
Important: If your environment requires that the Global Traffic Manager operate in a fail-safe or high availability mode, see the section titled Configuring fail-safe in Chapter 13: Setting Up a Redundant System, in the BIG-IP® Network and Systems Management Guide.
After you download the installation file and the matching MD5 checksum file, and before you perform the installation, we recommend you test the upgrade file. This verifies that you have downloaded a good copy of the upgrade file. To run the test, type the following commands, where Upgrade9.x.im is the name of the upgrade file you downloaded.
Check the output with the contents of the corresponding MD5 file. If they match, install the file. If they do not match, you should download the file again and repeat the process.
You need to re-activate the license on the BIG-IP system to use some of the new features added in this release.
To re-activate the license on the system
This release includes the following new features and fixes.
There are no new features in this release.
Important: For fixes that pertain to platform-related or cross-product issues, please see the release notes for Local Traffic Manager version 9.2.3.
[Link Controller] Throughput statistics unavailable (CR57647)
Previously, the Throughput statistics screen was unavailable in Link Controller. This screen is now available.
SNAT continuously using same SNAT pool member instead of load balancing (CR57636)
When you implemented SNAT, the system used the same SNAT pool member; it did not load balance between other pool members that might be available. The system now load balances across pool members correctly.
bigip_add and big3d_install processes sometimes acquire incorrect SSL certificate (CR59299)
In earlier versions, a BIG-IP system had multiple SSL certificates, the bigip_add and big3d_install processes could acquire the incorrect certificate, resulting in the Global Traffic Manager being unable to communicate with the other system. These scripts now acquire the correct certificate.
RTT score of 0 treated as a valid RTT score (CR57946)
In earlier versions, the system considered an RTT score of 0 as valid, allowing for the possibility that an unreachable LDNS server would have the highest RTT priority. An RTT score of 0 is no longer considered valid.
Uplink addresses not written to the wideip.conf file (CR59042)
Previously, the system did not write uplink addresses to the wideip.conf file correctly. The system now writes uplink addresses entered in the Configuration Utility to the wideip.conf file correctly.
big3d_install script removing big3dshim from the output of bigstart status (CR59165)
You can no longer start or the big3dshim utility directly. To start or stop the big3dshim utility, type the command bigstart <action> big3d.
[Global Traffic Manager] Configuration utility and deletion of all wide IP resources (CR58757)
Previously, the Configuration utility allowed you to delete all the pools/rules associated with the Wide IP without removing the Wide IP. This resulted in a wideip.conf file that cannot load. The system now does not allow you to delete the pools and rules associated with the wide IP without first removing the Wide IP itself.
[HF] Path probing protocols not passed to the big3d agent by the gtmd agent (CR57976)
In earlier versions, changing the default probing protocols resulted in the parameters not being passed to big3d agent properly. Parameters are now passed correctly to the big3d agent.
[Global Traffic Manager] ZoneRunner unresponsive after creating a new view and then
a new forwarding zone (CR58751)
Previously, if you used ZoneRunner to create a new view and then a new forwarding zone, ZoneRunner became unresponsive. ZoneRunner can now handle the creation of a new view and the association of a new zone to that view.
Once you have installed the software, you can use any of the following configuration options to update your configuration.
You can use the following SNMP OIDs in read/write mode. However, SNMP is not intended to be used as a general API for configuring the Global Traffic Manager or Link Controller. You can use the following SNMP OIDs in read/write mode.
|OID Name||OID Value|
|ltmVirtualServEnabled||Enable/disable virtual server|
|ltmVirtualAddrEnabled||Enable/disable virtual address|
|ltmNodeAddrNewSessionEnable||Enable/disable node address|
|ltmNodeAddrMonitorState||Force up/down node address|
|ltmPoolMemberNewSessionEnable||Enable/disable pool member|
|ltmPoolMemberMonitorState||Force up/down pool member|
The version 9.x releases often include SNMP OID updates related to new functionality. See the document, New SNMP Objects for a complete list.
[ Top ]
Beginning with the version 9.0.2 release, we added functionality to install multiple versions of the BIG-IP software on different boot images on one unit. A boot image is a portion of a drive with adequate space required for an installation. If the hardware supports multiple boot images, you are prompted to install the software on multiple boot images during the installation. The BIG-IP 1500 (C36), BIG-IP 3400 (C62), BIG-IP 6400 (D63), and BIG-IP 6800 (D68) platforms support this functionality.
The switchboot utility is available to manage installations on different boot images. You can use the switchboot utility from the command line to select which installed image boots.
If there is only one boot image available, the switchboot utility displays a message similar to this one and exits.
There is only one boot image to choose from: title BIG-IP 9.2.0 Build 167.4 - drive hda.1
Note: Any change you make using the switchboot utility is saved in the boot configuration file, grub.conf.
To use switchboot in non-interactive mode
If you know which boot image you want to boot, you can type the following command and specify the boot image number for <bootimage_number>:
switchboot -s <bootimage_number>
To use switchboot to list available boot images and the currently active boot images.
If you want to list the available boot images without specifying a new boot image from which to boot, type the following command:
To list options for switchboot
To list the options for the switchboot utility, type the following command:
To view the contents of the boot configuration file using switchboot
You can view the complete contents of the boot configuration file (grub.conf) with the following command:
This command is slightly different from switchboot -l in that -l only lists the boot image header lines, while -d displays the complete file.
The following items are known issues in the current release. For platform-related or cross-product issues, please see the release notes for Local Traffic Manager version 9.2.3.
Command prompt for combination boxes indicates the system is active even if Global Traffic Manager configuration does not load (CR49178)
When you have a combination box (a system that contains more than one F5 module, such as both the Global Traffic Manager and the Local Traffic Manager), the command prompt for that system indicates that the system is active even if an error occurred when loading the Global Traffic Manager configuration files. We recommend that you verify the availability of any F5 system through the Configuration utility to ensure that all necessary components are installed and operational.
Setup utility does not provide an option to lock down all ports (CR52161)
If you decide to implement the port lockdown feature available through the Setup utility, you will notice that there is no user interface option that allows you to select all ports simultaneously. You can still select all ports manually.
Configuration utility does not support SSL certificates and keys that contain bracket characters (CR53446)
When adding certificates and keys to your Global Traffic Manager installation, you must ensure that each certificate and key does not contain brackets ([ and ]). If certificates or keys are added to the Global Traffic Manager that contain these characters, you can remove them through the Command Line Interface to prevent them from affecting the Configuration utility.
Configuration utility does not allow you to install an encrypted ucs file when the config.encryption value is off (CR54052)
In the Global Traffic Manager version 9.2.2, you cannot install an encrypted ucs file if you have set the config.encryption value to off. To install an encrypted ucs file, change the config.encryption value to on.
Unable to activate the configsync.encryption value in the Configuration utility if the config.encryption value is off (CR54446)
In the Configuration utility, when you disable the config.encryption value, the Configuration utility also hides the configsync.encryption values as well. This occurs even if you have turned off the config.encryption value, yet have not turned off the configsync.encryption value. You can still modify these variables through the command line interface.
Term "software reboot" is ambiguous (CR55012)
After licensing the Global Traffic Manager, the system requests that you perform a software reboot. This statement is intended to indicate that you should restart the system (such as through the command bigstart restart before moving the system into a production environment.
Unable to change a server's type after initial configuration (CR55355)
When you add a server into the Global Traffic Manager, you determine the server's type, such as a BIG-IP system, or a generic host. Once you assign a server type, you cannot change it. If you need to change a server's type, you must delete the old server and then add the new one with the correct type.
[Link Controller only] Cannot create a wide IP that only contains iRules (CR55484)
In the Link Controller, you get an error if you create a wide IP that contains only iRules for determining load balancing operations. You must add at least one pool to each wide IP in the Link Controller.
When Global Traffic Manager has not yet probed a path, the system displays its last probe time as 1969 (CR56008)
When a new path is added to the Global Traffic Manager, the system probes the path to determine its viability. Before the first probe occurs, the Configuration utility displays the last probe time for the path as 1969. If you see this value, it indicates that the Global Traffic Manager has not yet probed the path.
[Link Controller only] Status of a disabled link is not populated in the Link Statistics screen (CR56569)
If you disable a link in the Link Controller, the system will stop sending traffic through the link. However, the Links Statistics screen does not update; instead, it shows the last set of data acquired before the link was disabled.
ZoneRunner zrd utility does not remove database files referencing deleted zones (CR 56597)
When you delete a zone from ZoneRunner, one of its utilities, zrd, does not delete the referencing database files. This issue does not impact performance.
Selecting Advanced from the Configuration list in the Links screen does not persist (CR56677)
After you select Advanced from the Configuration list in the Links screen, you have access to more advanced link configuration options. When you click the Update button, the screen refreshes to display only the basic options. To review the advanced options, re-select Advanced from the Configuration list again.
Updating the Name Server name on an NS record results in two NS records (CR56794)
The first time you update a Name Server name on an NS record, ZoneRunner adds the changed NS record as a new record and does not delete the old one. This prevents the ZoneRunner from creating an invalid zone that does not contain an NS record. To resolve this issue, delete the old NS record after the new one is created.
Cannot set a prepaid segment to 0 (CR57031)
When you are configuring prepaid segments for a link, you must specific a positive value. If you do not, an error appears, informing you that the prepaid value and the prepaid limit do not match.
Server status message metrics is inconsistent between 9.2.2 big3d and 4.6.4 big3d (CR57162)
In version 9.2.2, the bytes in and bytes out metrics are determined by dividing the total bytes value by 2. Consequently, the values for these two metrics will always be identical. This metrics change does not impact metrics collection or performance on either the 9.2.2 system or the 4.6.4 system.
Configuration utility can cease to function if the /var directory fills up (CR57265)
In instances where an extremely large amount of debugging information is generated, the /var directory can grow too large for the system to handle. See Workarounds for known issues for assistance with this issue. In environments where debugging is inactive, this issue does not occur.
Include statements configured with the ZoneRunner utility require a path of /config/namedb (CR57497)
If you are using ZoneRunner to manage your domains and you elect to use include statements, the files you reference in each include statement must reside somewhere within the /var/named directory. The path you supply in the include statement must include the path from this directory. For example, if you want to include a file that resides in /var/named/myzones/firstzone/main.file, the file path for the include statement would be /myzones/firstzone/main.file.
In addition, if you elect to modify files manually (instead of using ZoneRunner), you must ensure that you place any include statements at the top of the file. If you do not, the include statement might not get read correctly by ZoneRunner.
We highly recommend that if you use ZoneRunner to manage your domains, you use only the ZoneRunner user interface to make modifications to any files.
System doubles the monitors assigned to a virtual server and pool level (CR57646)
If you create a generic host virtual server, and have that server monitored at both the virtual server and pool level, the system assigns twice the number of monitors to that resource. To resolve this issue, deactivate monitoring of this virtual server at either the virtual server or pool level.
[Global Traffic Manager only] Monitor list for pool members does not initially appear in the properties screen (CR57724)
When you add monitors to pool members in a given pool, the monitors are assigned through the Global Traffic Manager to the specified resource. When you return to one of these pool members, the properties screen does not initially display the list of assigned monitors. To update the properties screen to display these monitors, select modify a monitor-related setting in the screen.
[Link Controller] Disabled auto-discovery feature marks all links as down. (CR59052)
The Link Controller uses an auto-discovery feature to manage and maintain links. You can access this feature from the Main tab of the navigation pane by expanding System, clicking General Properties, and then choosing General from the Global Traffic menu. If you disable this feature, the Link Controller marks all links as down and is unable to manage traffic. We recommend that you do not de-activate this feature.
[Global Traffic Manager] Deleting multiple zone types at once through Zonerunner restarts named (CR59093)
If you attempt to delete multiple zone files from the ZoneRunner component of the Global Traffic Manager, the named utility restarts, and an error message appears. To work around this issue, delete only one zone file at a time from the ZoneRunner user interface.
[Global Traffic Manager] In Internet Explorer, check boxes do not automatically update until the check box loses focus (CR59191)
When managing zone files through the ZoneRunner in Internet Explorer, two check boxes change the appearance of the user interface: Create Reverse Zone and Create A Record. These check boxes prompt the addition of other configuration options. In Internet Explorer, these additional options do not appear until you clear the check box.
[Link Controller] Maximum Addresses Returned / Round Robin LDNS is not configurable in Link Controller (CR 59781)
The feature Maximum Addresses Returned (formerly known as Round Robin LDNS) cannot be configured in LC via the UI or CLI.
Changes in US and Canada Daylight Saving Time (CR68781)
The Energy Policy Act of 2005, which was passed by the US Congress in August 2005, changed both the start and end dates for Daylight Saving Time in the United States, effective March 2007. Canada is also adopting this change. The resulting changes are not reflected in this version of the product software. To find out more about this issue, refer to SOL6551: F5 Networks software compliance with the Energy Policy Act of 2005.
The following section describes a workaround for the corresponding known issue listed in the previous section.
You can work around this issue by deleting the log files within the /var directory. To delete these log files, use the following steps:
Note that log files are swept every 30 minutes. For this issue to occur, the log files would have to fill up the available space on the system in less than 30 minutes.
This product includes software developed by Gabriel Forté.
This product includes software developed by Bill Paul.
This product includes software developed by Jonathan Stone.
This product includes software developed by Manuel Bouyer.
This product includes software developed by Paul Richards.
This product includes software developed by the NetBSD Foundation, Inc. and its contributors.
This product includes software developed by the Politecnico di Torino, and its contributors.
This product includes software developed by the Swedish Institute of Computer Science and its contributors.
This product includes software developed by the University of California, Berkeley and its contributors.
This product includes software developed by the Computer Systems Engineering Group at the Lawrence Berkeley Laboratory.
This product includes software developed by Christopher G. Demetriou for the NetBSD Project.
This product includes software developed by Adam Glass.
This product includes software developed by Christian E. Hopps.
This product includes software developed by Dean Huxley.
This product includes software developed by John Kohl.
This product includes software developed by Paul Kranenburg.
This product includes software developed by Terrence R. Lambert.
This product includes software developed by Philip A. Nelson.
This product includes software developed by Herb Peyerl.
This product includes software developed by Jochen Pohl for the NetBSD Project.
This product includes software developed by Chris Provenzano.
This product includes software developed by Theo de Raadt.
This product includes software developed by David Muir Sharnoff.
This product includes software developed by SigmaSoft, Th. Lockert.
This product includes software developed for the NetBSD Project by Jason R. Thorpe.
This product includes software developed by Jason R. Thorpe for And Communications, http://www.and.com.
This product includes software developed for the NetBSD Project by Frank Van der Linden.
This product includes software developed for the NetBSD Project by John M. Vinopal.
This product includes software developed by Christos Zoulas.
This product includes software developed by the University of Vermont and State Agricultural College and Garrett A. Wollman.
In the following statement, "This software" refers to the Mitsumi CD-ROM driver: This software was developed by Holger Veit and Brian Moore for use with "386BSD" and similar operating systems. "Similar operating systems" includes mainly non-profit oriented systems for research and education, including but not restricted to "NetBSD," "FreeBSD," "Mach" (by CMU). This product includes software developed by the Apache Group for use in the Apache HTTP server project (http://www.apache.org/).
This product includes software licensed from Richard H. Porter under the GNU Library General Public License (© 1998, Red Hat Software), www.gnu.org/copyleft/lgpl.html.
This product includes the standard version of Perl software licensed under the Perl Artistic License (© 1997, 1998 Tom Christiansen and Nathan Torkington). All rights reserved. You may find the most current standard version of Perl at http://www.perl.com.
This product includes software developed by Jared Minch.
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).
This product includes cryptographic software written by Eric Young (email@example.com).
This product contains software based on oprofile, which is protected under the GNU Public License.
This product includes RRDtool software developed by Tobi Oetiker (http://www.rrdtool.com/index.html) and licensed under the GNU General Public License.
This product contains software licensed from Dr. Brian Gladman under the GNU General Public License (GPL).
This product includes software developed by the Apache Software Foundation (http://www.apache.org/).
This product includes Hypersonic SQL.
This product contains software developed by the Regents of the University of California, Sun Microsystems, Inc., Scriptics Corporation, and others.
This product includes software developed by the Internet Software Consortium.
This product includes software developed by Nominum, Inc. (http://www.nominum.com).
This product contains software developed by Broadcom Corporation, which is protected under the GNU Public License.