Manual Chapter :
New Features in this Version
Applies To:
Show Versions
F5OS-A
- 1.7.0
New Features in this Version
Hardware
F5 r12000 Series platform
This release supports the F5 r12000-DS platform. For more
information, see
Platform Guide:
r5000/r10000 Series.
Tenants
- For information about supported tenants, see theF5 rSeries hardware productssection of the F5 hardware/software compatibility matrix.
- This release provides support for BIG-IP Next Tenants to run on r5000 and r10000 platforms. For information on BIG-IP Next tenants, see my.f5.com.
Software
F5OS-A (rSeries) version 1.7.0 supports the authentication changes for the iHealth service. Prior versions will fail authentication. See K000132249: Authentication changes in F5 iHealth for more information.
System webUI enhancements
This release provides following webUI enhancements:
- The User Management section is renamed to Authentication and Access
- A new Certificate Revocation List feature is added to the Authentication and Access section.
- An OCSP section is added to the TLS Configuration screen.
- TLS Configuration is now Certificate Management screen.
- You can now add IPv6 Prefix Length under the Add/Edit tenant screen.
- The iHealth Configuration screen now has Client ID and Client Secret fields to support API tokens for using the new iHealth system (ihealth2.f5.com).
- You can now configure the default port for SNMP Polling.
- You can now find the Account status and expiry status details under the Users and Roles section.
- A Host Log Configuration section is added to the Log Settings screen.
- You can now configure remote logging security under the log settings.
- Enhanced the password features, providing more descriptive error message.
- You can now configure Authorized Keys when adding or editing a user.
- F5 r5000 and r10000 platforms supports BIG-IP Next tenants.
- The Tenant Details screen now has graph widgets for the following tenant utilization categories:
- CPU
- Memory
- Network
- Storage
- You can now configure an advisory banner under the System Settings section.
CLI enhancements
- This release enables you to cancel a file import/export operation.
- This release enables you to view system version from the CLI.
- This release supports SSH public key authentication.
- This release also supports Tenant resource validation.
- You can now upload QKView files to a remote system, configurable from the CLI.
- This release supports AOM network and SSH configuration.
- Global tunnel parameters are now configured from the F5OS CLI for r5000/r10000 platforms, instead of within the BIG-IP tenant
- A CLI show command has been implemented to display the installation status for K3S components.
- A CLI config command has been implemented to configure the OpenTelemetry exporter.
Cryptographic agility
Cryptographic agility
This release adds support for additional cryptographic devices..
User status
User status
This release now shows user status in a readable string format rather than code.
Timeout for root user
Timeout for root user
This release implements a configurable idle timeout for a root user connecting from a serial console.
OCSP Configuration
OCSP Configuration
This release includes support for using Online Certificate Status Protocol (OCSP) with client certificate authentication.
Logon activity notifications
Logon activity notifications
This release provides support for notifications of logon activity, including the last five successful logins and the last five failed logins per user.
BIG-IP Next Tenants
BIG-IP Next Tenants
This release provides support for BIG-IP Next Tenants to run on r5000 and r10000 platforms, including:
- Standalone tenant deployment (recommended upto 2 tenants)
- Upgrading and downgrading images
- CP-HA VLAN
- QAT Acceleration
The support varies based on the system version:
- rSeries 5000 appliances
- 5600: 4, 8, and 12 vCPU BIG-IP Next tenants
- 5800: 4, 8, and 18 vCPU BIG-IP Next tenants
- 5900: 4, 8, and 26 vCPU BIG-IP Next tenants
- Multitenancy: up to BIG-IP Next 2 tenants
- rSeries 10000 appliances
- 10600: 4, 8, and 24 vCPU BIG-IP Next tenants
- 10800: 4, 8, and 28 vCPU BIG-IP Next tenants
- 10900: 4, 8, and 36 vCPU BIG-IP Next tenants
- Multitenancy: up to BIG-IP Next 2 tenants
The support for tenants running BIG-IP Next on rSeries r2000, r4000 and r12000 will be added in future releases of F5OS.
Appliance Orchestration Manager Resiliency
Appliance Orchestration Manager Resiliency
During the K3S cluster bring up, if any of the K3S components fail to start up, the Appliance Orchestration Manager will uninstall and reinstall that K3S component. It will also provide a detailed message on the cluster state.
Remote Authentication Improvement
Remote Authentication Improvement
This release provides additional supports for remote authentication to validate non-root users logging in via console.
OpenTelemetry Exporter
OpenTelemetry Exporter
This release implements an OpenTelemetry exporter which enables streaming of F5OS metrics and logs. As part of the initial release, all the metrics and logs will be exported through a gRPC unsecure connection.
The initial release includes exporting the following metric using the OTEL (OpenTelemetry) Metric exporter:
- Front-Panel interface counters
- CPU/Memory/Disk utilization metrics
- Optic DDM metrics
- BIG-IP tenant utilization metrics: Memory, Disk, CPU, Interface
- Metrics, such as temperature and fan. For more information, see OpenTelemetry Metrics Overview
The initial release also includes streaming the following log file using the OTEL Logging exporter:
- platform.log
QKView Log Improvement
This release inplemented output from the CLI
show history
command and the .bash_history
file has been added to the QKView logs.
