New Features in this Version

This release supports BIG-IP 17.5.0 for up to 16-blade partition configuration on VELOS CX1610 with BX520 blade system.

For more information about compatibility and supported tenants, see the

VELOS hardware products

section of K86001294: F5OS hardware/software support matrix.

For more information about which tenants are supported on VELOS platforms, see K86001294: F5OS hardware/software support matrix.

This release provides the following webUI enhancements:

You can now create and configure Management VLANs for management interfaces from the webUI. These VLANs effectively segregate management traffic, thereby improving network security and stability. For example, with management VLANs, you can:
Separate tenants on different VLANs to improve security and maintain clear security zones within the same chassis.
Manage IP addresses more effectively.
BX520 blades now support 4x100Gb on designated high-speed ports with the proper optics and breakout cables.
The
Authentication Settings
screen now has the following fields to configure while setting up ‌the local password policy.
Number of Previous User Passwords Remembered
: Specifies the number of past or previous passwords the system should remember.
Minimum days between password updates
: Specifies the minimum number of days required between password updates. The default value is 0.
Password Expiry Warning Period
: Specifies how many days in advance you would like to receive alerts for password expiration. The default value is 0.

This release provides the following CLI enhancements:

BX520 blades now support 4x100Gb on designated high-speed ports with the proper optics and breakout cables.
You can now configure
password-policy min-duration
,
password-policy password-memory
, and
password-policy expiration-warning
while setting up ‌the local password policy from the CLI.
A CLI command has been implemented to set image version in the FIPS mode.

The TCP-COP feature helps reduce high CPU usage in the TMM process caused by an increase in concurrent flows. By enabling this feature, you can drop new connections from being established at the platform level when the queue size exceeds a configured threshold, thus maintaining stable TMM CPU usage.

This release supports the Federal Information Processing Standards (FIPS) 140-3 compliant mode license for F5 VELOS platforms. This validation confirms the module meets security standards and safeguards against unauthorized access and tampering.

This release enables you to perform the FIPS Zeroization process in the FIPS VELOS platforms before decommissioning of the cryptographic modules, or after the key rotation, or upon tamper detection. For more information, see section On-demand Zeroization in the

VELOS Systems: Software Installation and Upgrade

guide.