Releases: F5Networks/f5-appsvcs-extension
v3.37.0
Updated the repository for AS3 v3.37.0. This release contains the following changes. See the Document revision history for more information and links.
- Added support for network address lists
- Added support for overrides when using the file property in a WAF policy, GitHub Issue 544
- Added support for setting a ratio for a pool when using the ratio load balancing method (see the updated GSLB example), GitHub Issue 594
- Added support for GLSB iRules, GitHub Issue 590
Issues Resolved:
- Pool members with duplicate addresses in route domain 0 do not fail validation
v3.36.0
Updated the repository for AS3 v3.36.0. This release contains the following changes. See the Document revision history for more information and links.
- Reduced the memory allocation recommendation for restjavad from a maximum of 2500MB to 2400MB (see Restjavad memory allocation)
- f5secret keyword replaced by f5PostProcess keyword in the schema
- f5LongSecret keyword replaced by f5PostProcess keyword in the schema
- Do not store GET requests to /declare in the task history
- Updated to Service Discovery 1.10.11-1, and updated related packages
Issues Resolved:
- SSL Orchestrator access profiles cannot be attached because RBA and WEBSSO profiles are automatically attached (see the updated APM Profile example)
- Service Discovery nodes prevent deleting a partition
- POST with updateMode: complete fails after a DELETE
- ignoreChanges not working properly in external data groups, GitHub Issue 569
- Cannot use certificates from shared application
- GSLB Topology Records are sometimes lost, GitHub Issue 567
- TMSH CLI script can fail under load due to timeout, GitHub Issue 581
- Service Discovery can fail with ‘Invalid status code: 1’ due to saving tasks too quickly
- Service Discovery tasks can be lost on restnoded restart
v3.35.0
Updated the repository for AS3 v3.35.0. This release contains the following changes. See the Document revision history for more information and links.
- Added support for referencing IP Intelligence properties
- Added support for specifying a node name for static nodes in a Service Discovery declaration
- Added support for future bot defense features
- Added support for using strings for route domains in an explicit HTTP profile
Issues Resolved:
- URL fetch of certificates results in corrupted files, GitHub Issue 506
- AS3 Schema issue where it applies an incorrect restriction if serverType is undefined, GitHub Issue 530
- Saving the BIG-IP state could block AS3 from handling an immediate new request, resulting in a failure response
- Task can hang while waiting for a script to finish
- Service Discovery secrets are not encrypted on BIG-IQ
v3.34.0
Updated the repository for AS3 v3.34.0. This release contains the following changes. See the Document revision history for more information and links.
- Added support for skipCertificateCheck to data groups referenced by URL, GitHub Issue #511
- Added the proxy-request event to more Endpoint Policy items
- Added support for the log Endpoint Policy rule action
Issues Resolved:
- Referencing persistence profiles results in mcpd error, GitHub Issue #123
- Failure to fetch stored declarations results in incorrect 204 response
- Unchecked mode fails when shareNodes true and declaration moves pool from Tenant/Application to Common/Shared
- Sync settings updates on devices that are in a cluster, GitHub Issue #525
- Unchecked mode fails for several of the GSLB classes when the GSLB object is changed
v3.33.0
Updated the repository for AS3 v3.33.0. This release contains the following changes. See the Document revision history for more information and links.
- Added support for disabling SSL on TLS profiles
- Added SNAT options to Policy_Action_Forward_Select
- Added the rateLimit property to TCP, HTTP, and HTTPS services to enable setting the maximum number of connections per second allowed for a virtual server
Issues Resolved:
- Redirect server created by setting Service_HTTPS redirect80 true always allows all VLANs, GitHub Issue #514
- Leading comment stripped from iRule, GitHub Issue #252
- Too many ICR requests when searching for GTM monitors
- HTTP_Profile insertHeader.value is not idempotent with double quotes or question marks, GitHub Issue #516
- Unable to Post declaration with service discovery after upgrade from v3.30.0
- Unchecked mode fails when using Service_TCP in /Common/Shared with sharedAddresses set to true
v3.32.1
Updated the repository for AS3 v3.32.1 LTS. This release contains the following changes. See the Document revision history for more information and links.
- Released AS3 3.32.1 as a LTS (Long Term Support) version. See the AS3 SUPPORT.md for information about the AS3 support policy.
v3.32.0
Updated the repository for AS3 v3.32.0. This release contains the following changes. See the Document revision history for more information and links.
- Added support for the HTTP Proxy Connect profile
- Added support for ignoreChanges for resources retrieved from external URLs
- Expanded the firewall rule list of supported protocols
- Added support for data groups in HTTP URI conditions
Issues Resolved:
- Tenants with names containing periods and non-zero route domains, GitHub Issue #496
- Service Discovery cannot be disabled if tasks endpoint not available, GitHub Issue #502
- controls.dryRun and controls.traceResponse breaking GCP service discovery, GitHub Issue #493
- Patch operations do not work with no initial declaration, GitHub Issue #508
- Patch action is not properly filtered by path
- State not properly rolled back on shareNodes failure
- Honor the order of iRules specified in a declaration
- Escaping curly brackets in quoted strings, GitHub Issue #513
v3.31.0
Updated the repository for AS3 v3.31.0. This release contains the following changes. See the Document revision history for more information and links.
- Added support for HTML profiles, GitHub Issue #226
- Added support for the FastL4 profile properties synCookieEnable and synCookieAllowlist, GitHub Issue #330
- Added support for adding a route domain to static and auto-discovered pool members, GitHub Issue #479
- Added support for the remaining HTML rules, GitHub Issue #485
- Added support for AFM NAT policies for Forwarding virtual servers, GitHub Issue #297
- The results of a GET on the /task endpoint are now documented in the OpenAPI reference, GitHub Issue #321
- The OpenAPI reference for the /task endpoint now include the results objects response, errors, and declarationFullId, GitHub Issue #320
- Moved Unchecked mode from experimental to supported
- Added an example for TCP and UDP health monitors, GitHub Issue #436
Issues Resolved:
v3.30.0
Updated the repository for AS3 v3.30.0. This release contains the following changes. See the Document revision history for more information and links.
- Added support for dry_run in the ADC Controls class
- Added support for using Control objects as query parameters
- Added support for referencing a Chain CA with a ‘use’ pointer
- Added support for external GSLB monitors
- Added support for the HTML rule tag-append-html
- AS3 now retries URL fetches on network errors
Issues Resolved:
- GSLB_Topology_Records fail when referencing GSLB_Pool, GitHub Issue #475
- AS3 occasionally tries to remove shared nodes that are in use by Service Discovery, GitHub Issue #483
- WAF policy load from file fails when using targetHost
- GSLB_Toplogy_Records can occasionally fail with “nonexistent pool” message when referencing GSLB_Pool
- GSLB_Toplogy_Records can occasionally fail with “already exists” message when referencing GSLB_Data_Center
- Tenant filtering does not work on BIG-IQ GET requests
v3.29.0
Updated the repository for AS3 v3.29.0. This release contains the following changes. See the Document revision history for more information and links.
- Added support for using iFiles with iRules in a declaration
- Added support for enabling/disabling NAT and SNAT on a pool
- Added support for exists/does-not-exist operands in an Endpoint Policy
- Added support for additional TCP Endpoint Policy condition events
- The ID property of the ADC class is now optional
Issues Resolved:
- AS3 fails to start due to socket hang-up error, GitHub Issue #450
- Error with IPv6 Service_Address on custom route domain, GitHub Issue #324
- TCP Monitor remove send/receive requirement to bring it in line with TMSH, GitHub Issue #436
- Persist /Common/Shared across multiple declarations, GitHub Issue #443
- Shared node logic failing for /Common/Shared
- Service Discovery is not idempotent when AS3 shared nodes overlap, GitHub Issue #461
- Tenants occasionally missing in responses and tasks when posting to declare/[Tenant], GitHub Issue #457
- Order of returned tasks changed with 3.26, GitHub Issue #456