Manual Chapter :
Behavior Changes in BIG-IQ Version 8.0.0
Applies To:
Show Versions
BIG-IQ Centralized Management
- 8.0.0
Behavior Changes in BIG-IQ Version 8.0.0
BIG-IQ setup and maintenance
BIG-IQ version 8.0.0 includes the following changes to
BIG-IQ setup and maintenance:
Updated latency recommendations
For optimum performance, F5 makes the following maximum round trip latency
recommendations:
For connections between these
components | Round trip latency cannot exceed |
|---|---|
between any two DCD or BIG-IQ devices in a DCD
cluster | 75 ms. |
between the BIG-IQ CM and the BIG-IP devices it
manages | 250 ms. |
between the managed BIG-IP devices and the DCDs
that collect their data | 250 ms. |
Single NIC BIG-IQ VE support for new installation
For new installations of BIG-IQ version 8.0.0, you can now create a BIG-IQ virtual edition instance using a single network interface card (NIC). Previously, you needed at least two.
Upgrading an existing BIG-IQ with a single NIC to version 8.0.0 is not currently supported.
Increased application services supported to 1000
BIG-IQ can now support managing up to 1000 application services.
M5 instance types supported on AWS for BIG-IQ VEs
You can now use an M5 instance type to create a BIG-IQ virtual
edition instance on AWS. Previously, only M4 instance types were supported.
Password reset before licensing and set up
The first time you log in to BIG-IQ (before you license and complete
the initial configuration), you are now prompted to reset the default password for admin
from the BIG-IQ login screen. When you change the admin password from the BIG-IQ login
screen, BIG-IQ uses that password to update both admin and root user information. You
can change both the root and admin passwords when you license BIG-IQ.
Querying Elasticsearch cluster for DCDs
SSL is now enabled for Elasticsearch found on data collection devices
(DCDs) upgraded to version 8.0.0. Queries to the Elasticsearch cluster can be performed
using the cURL
command:
Sample command for querying the DCD nodes:curl -k -u admin:admin https://localhost:9200/<query>
curl -k -u admin:admin https://localhost:9200/_cat/nodes?
Support for DCD snapshot storage on SMB 2 and SMB3
BIG-IQ now supports DCD backup storage on SMB versions 1-3. The new
default external storage settings are for version SMB3. SMB 1 is still supported, but
this version is not recommended due to its security vulnerabilities. For more
information about managing DCD snapshots see
Setting up and
Configuring a BIG-IQ Centralized Management Solution
on support.f5.com
. BIG-IQ high availability
BIG-IQ version 8.0.0 includes the following changes to BIG-IQ high availability:
TCP port for synchronizing with the peer BIG-IQ in a high availability configuration has changed
TCP port for synchronizing with the peer BIG-IQ in a high availability configuration has changed The port BIG-IQ uses to synchronize with its peer in a high availability configuration has changed from 27017 to 5432. For more information about open ports required, refer to: K15612.
BIG-IQ upgrade
BIG-IQ version 8.0.0 includes the following changes to
BIG-IQ upgrades:
Minimum downtime upgrade not supported in this
release
In this release, the minimum downtime (rolling) upgrade scenario is
not supported. For additional detail on how this might impact the upgrade process for
you, refer to: upgrading-to-8-0-0.html#concept-1984_concept-7677
BIG-IQ user management
BIG-IQ version 8.0.0 includes the following changes to BIG-IQ user management:
RADIUS Members of a User Group
Beginning with BIG-IQ version 8.0.0, a newly created RADIUS user group must have at least one authorization attribute. Only users having all the group's authorization attributes will be members of the group.
After you upgrade to BIG-IQ 8.0.0 or later, any existing RADIUS user groups without any authorization attributes will contain no members. They will therefore serve no purpose. All existing RADIUS users will have no authorization to access BIG-IQ functionality through the default membership in a group.
