Manual Chapter : Behavior Changes in Version 8.0.0

Applies To:

Show Versions Show Versions

BIG-IQ Centralized Management

  • 8.0.0
Manual Chapter

Behavior Changes in Version 8.0.0

BIG-IQ setup and maintenance

BIG-IQ version 8.0.0 includes the following changes to BIG-IQ setup and maintenance:

Updated latency recommendations

For optimum performance, F5 makes the following maximum round trip latency recommendations:
For connections between these components
Round trip latency cannot exceed
between any two DCD or BIG-IQ devices in a DCD cluster
75 ms.
between the BIG-IQ CM and the BIG-IP devices it manages
250 ms.
between the managed BIG-IP devices and the DCDs that collect their data
250 ms.

Increased application services supported to 1000

BIG-IQ can now support managing up to 1000 application services.

M5 instance types supported on AWS for BIG-IQ VEs

You can now use an M5 instance type to create a BIG-IQ virtual edition instance on AWS. Previously, only M4 instance types were supported.

Single NIC VE support

You can now create a BIG-IQ virtual edition instance using a single network adapter. Previously, you needed at least two.

Password reset before licensing and set up

The first time you log in to BIG-IQ (before you license and complete the initial configuration), you are now prompted to reset the default password for admin from the BIG-IQ login screen. When you change the admin password from the BIG-IQ login screen, BIG-IQ uses that password to update both admin and root user information. You can change both the root and admin passwords when you license BIG-IQ.

Querying Elasticsearch cluster for DCDs

SSL is now enabled for Elasticsearch found on data collection devices (DCDs) upgraded to version 8.0.0. Queries to the Elasticsearch cluster can be performed using the cURL command:
curl -k -u admin:admin https://localhost:9200/<query>
Sample command for querying the DCD nodes:
curl -k -u admin:admin https://localhost:9200/_cat/nodes?v

Support for DCD snapshot storage on SMB 2 and SMB3

BIG-IQ now supports DCD backup storage on SMB versions 1-3. The new default external storage settings are for version SMB3. SMB 1 is still supported, but this version is not recommended due to its security vulnerabilities. For more information about managing DCD snapshots see
Setting up and Configuring a BIG-IQ Centralized Management Solution
on
support.f5.com
.

BIG-IQ high availability

BIG-IQ version 8.0.0 includes the following changes to BIG-IQ high availability:

TCP port for synchronizing with the peer BIG-IQ in a high availability configuration has changed

TCP port for synchronizing with the peer BIG-IQ in a high availability configuration has changed The port BIG-IQ uses to synchronize with its peer in a high availability configuration has changed from 27017 to 5432. For more information about open ports required, refer to: K15612.

BIG-IQ upgrade

BIG-IQ version 8.0.0 includes the following changes to BIG-IQ upgrades:

Minimum downtime upgrade not supported in this release

In this release, the minimum downtime (rolling) upgrade scenario is not supported. For additional detail on how this might impact the upgrade process for you, refer to: upgrading-to-8-0-0.html#concept-1984_concept-7677

BIG-IQ user management

BIG-IQ version 8.0.0 includes the following changes to BIG-IQ user management:

RADIUS Members of a User Group

Beginning with BIG-IQ version 8.0.0, a newly created RADIUS user group must have at least one authorization attribute. Only users having all the group's authorization attributes will be members of the group.
After you upgrade to BIG-IQ 8.0.0 or later, any existing RADIUS user groups without any authorization attributes will contain no members. They will therefore serve no purpose. All existing RADIUS users will have no authorization to access BIG-IQ functionality through the default membership in a group.