Release Notes : BIG-IQ ADC, 4.5.0

Applies To:

Show Versions Show Versions

BIG-IQ ADC

  • 4.5.0
Release Notes
Original Publication Date: 03/05/2019 Updated Date: 04/18/2019

Summary:

This release note documents version 4.5.0 of BIG-IQ Application Delivery Controller.

Contents:

Product description

BIG-IQ Application Delivery Controller (ADC) makes it possible for you to monitor and manage the Local Traffic Manager (LTM) configuration on BIG-IP devices. This module helps the user:

  • Create efficient work flows to view the LTM configurations in a relational and dynamic user interface.
  • Control access to configuration objects using fine-grained, role-based access control (RBAC). This allows administrators to delegate frequently performed operations (for example, enabling or disabling pool members) to the correct team member.
  • Maintain ultimate control of the LTM configuration by providing a staging option. Delegated team members make all relevant changes, then the administrator can apply them after a quick review.

Screen resolution requirement

To properly display, the BIG-IQ system requires that your screen resolution is set to 1280x1024 or higher.

Browser support

BIG-IQ ADC supports the following browsers and versions:

  • Microsoft Internet Explorer version 9 and later
  • Mozilla Firefox version 29.x and later
  • Google Chrome version 34.x and later

BIG-IP compatibility

SOL14592 provides a summary of version compatibility for specific features between the BIG-IQ system and BIG-IP releases.

User documentation for this release

For a comprehensive list of documentation that is relevant to this release, refer to the BIG-IQ 4.5.0 Documentation page.

Software installation

For procedures about specifying network options and performing initial configuration, refer to the BIG-IQ System: Licensing and Initial Configuration guide.

Upgrading BIG-IQ

Before you can upgrade the BIG-IQ system, you must perform the following tasks:

  • Download the .iso file for the upgrade from F5 Downloads to /shared/images on the BIG-IQ system. If you need to create this directory, use the exact name /shared/images.
  • Select a disk volume on which to install the upgrade. You must install the BIG-IQ software on an available volume.
  • Locate the user configuration set (UCS) in the /var/local/ucs directory on the source installation location, and copy the UCS file to another system for safe keeping.
Warning: These procedures require that the BIG-IQ system is temporarily unavailable and unable to manage BIG-IP devices until the upgrade is complete. BIG-IP devices can continue to manage traffic during this time.

If you have configured the BIG-IQ system in a high availability cluster, perform these steps on each BIG-IQ system in the cluster in immediate succession. It is important to get the cluster members on the same software version as quickly as possible to avoid potential user experience issues.

For specific instructions about upgrading the BIG-IQ system, refer to the BIG-IQ System: Licensing and Initial Configuration guide.

Features

Discover, Import, Create, Modify, and Delete LTM objects

Using BIG-IQ ADC, you can manage LTM configuration objects (virtual servers, pools, pool members, nodes and iRules).

Monitor LTM configuration health and statistics

Using BIG-IQ ADC, you can manage the health and statistics of BIG-IP devices.

Bulk deployment of LTM configuration changes

Using BIG-IQ ADC, you can submit modifications you have made to LTM configuration objects using the batch deployment feature. Support is included for creating, updating and deleting virtual servers, pools, pool members, and nodes.

Enable/Disable Pool Members and Nodes

Using BIG-IQ ADC, you can enable and disable pool members and nodes on managed devices.

Fine-Grained RBAC for LTM objects

Using BIG-IQ ADC, administrators can delegate permissions (granting Read/Write or Read-only access) for object management to custom roles for both collections of LTM objects and at any level in an LTM object hierarchy.

Fixes

Application Delivery Controller is a new module for this release, so there are no product fixes.

Known issues

Issue Description Workaround (if available)
ID 496706 When a node or pool member has been forced offline, if you enable or disable the object from the BIG-IQ device, the monitoring capability for that object is disabled. There are two options for dealing with this issue.

If the forced offline object has already been enabled or disabled using the BIG-IQ software, then you must use the BIG-IP system to force the object offline and then reset the object's enabled/disabled state. This restores monitoring of the object. If the forced offline object is not yet enabled or disabled, you can use a REST API call from the BIG-IQ system.

To enable the pool member that has been forced offline with BIG-IQ software, send a PATCH request to:

https://<BIGIQ_IP_Address>/mgmt/shared/resolver/device-groups/<GroupName>/devices/<BIGIP_Device>/rest-proxy/mgmt/tm/ltm/pool/<PoolName>/members/<Member>

Use the following as the PATCH body:

{ "state": "user-up", "session": "user-enabled" }

To disable it instead, use the following as the PATCH body:

{ "state": "user-up", "session": "user-disabled" }
ID 497740 An attempt to discover a BIG-IP device running an older version could fail with an unrelated error message. It can also fail with an unrelated error message when deployed to a BIG-IP device running an older version. From the list of managed devices, double click the device, and then select Remove to delete the device from the list of managed devices.
ID 501095 When the BIG-IQ device discovers a BIG-IP device, LTM configuration is not automatically imported into BIG-IQ ADC. This behavior is by-design. This behavior allows customers to choose the devices for which they want to manage the LTM configuration, instead of importing the LTM configuration for all devices, which could unnecessarily impact the performance of the BIG-IQ device. Follow these steps to enable import of LTM configuration from a previously discovered device.
  1. From the ADC Devices panel, double click the device that you now want to manage. The properties screen opens.
  2. Select Manage ADC Configuration.
  3. Click Save.
Configuration objects on the target device will now be managed and displayed in the ADC module.

Removing BIG-IQ system services from a BIG-IP device

To manage a BIG-IP device using the BIG-IQ system, you must install specific BIG-IQ system components onto that device using the procedure outlined in the BIG-IQ Device: Device Management guide. In the event that you have to remove these services for any reason, use this procedure.
  1. Log in to the command line of the BIG-IP device.
  2. Stop any running BIG-IQ system services.
    Note: The msgbusd service might not be installed. You can use the bigstart status command to see if it is running.

    $ bigstart stop restjavad

    $ bigstart stop msgbusd

  3. Remove the RPM packages related to the BIG-IQ system.

    mount -o remount,rw /usr

    rpm -qa | grep f5-rest-java | xargs rpm -e --nodeps

    rpm -qa | grep msgbusd | xargs rpm -e  --nodeps

    mount -o remount,ro /usr

    This removes, from the BIG-IP device, the BIG-IQ system components, including the F5-contributed cloud connector iApp template (cloud_connector.tmpl).

  4. Optional: Reinstall the F5-contributed cloud connector iApp template:
    1. Download the cloud_connector.tmpl iApp template from F5 DevCentral, https://devcentral.f5.com/wiki/iApp.Cloud_Connector_iApp_Template.ashx.
      Note: You need an account to access the DevCentral site.
    2. Unzip the file, and on the BIG-IP system, upload it to the /var/local/app_template directory.
    3. Install the template with this command: tmsh load / sys application template cloud_connector.tmpl

Contacting F5 Networks

Phone: (206) 272-6888
Fax: (206) 272-6802
Web: http://support.f5.com
Email: support@f5.com

For additional information, please visit http://www.f5.com.

How to Contact F5 Support or the SOC

You can contact a Network Support Center as follows:

You can manage cases online at F5 WebSupport (registration required). To register email CSP@F5.com with your F5 hardware serial numbers and contact information.

Additional resources

You can find additional support resources and technical documentation through a variety of sources.

F5 Networks Technical Support

Free self-service tools give you 24x7 access to a wealth of knowledge and technical support. Whether it is providing quick answers to questions, training your staff, or handling entire implementations from design to deployment, F5 services teams are ready to ensure that you get the most from your F5 technology.

AskF5

AskF5 is your storehouse for thousands of solutions to help you manage your F5 products more effectively. Whether you want to search the knowledge base periodically to research a solution, or you need the most recent news about your F5 products, AskF5 is your source.

F5 DevCentral

The F5 DevCentral community helps you get more from F5 products and technologies. You can connect with user groups, learn about the latest F5 tools, and discuss F5 products and technology.

AskF5 TechNews

Weekly HTML TechNews
The weekly TechNews HTML email includes timely information about known issues, product releases, hotfix releases, updated and new solutions, and new feature notices. To subscribe, click TechNews Subscription, complete the required fields, and click the Subscribe button. You will receive a confirmation. Unsubscribe at any time by clicking the Unsubscribe link at the bottom of the TechNews email.
Periodic plain text TechNews
F5 Networks sends a timely TechNews email any time a product or hotfix is released. (This information is always included in the next weekly HTML TechNews email.) To subscribe, send a blank email to technews-subscribe@lists.f5.com from the email address you are using to subscribe. Unsubscribe by sending a blank email to technews-unsubscribe@lists.f5.com.

Legal notices