Memory: 12 GB or more

All licensable module-combinations may be run on platforms with 12 GB or more of memory, and on VE and vCMP guests provisioned with 12 GB or more of memory.

Memory: 8 GB

The following guidelines apply to the BIG-IP 2000s, 2200s, 3900, 6900 platforms, to the VIPRION B4100 and B4100N platforms, and to VE guests configured with 8 GB of memory. (A vCMP guest provisioned with 8 GB of memory has less than 8 GB of memory actually available and thus does not fit in this category.)

• No more than three modules should be provisioned together.
• On the 2000s and 2200s, Application Acceleration Manager (AAM) can be provisioned with only one other module.
• Note that Global Traffic Manager (GTM) and Link Controller (LC) do not count toward the module-combination limit.

Memory: Less than 8 GB and more than 4 GB

The following guidelines apply to platforms, and to VE and vCMP guests provisioned with less than 8 GB and more than 4 GB of memory. (A vCMP guest provisioned with 8 GB of memory has less than 8 GB of memory actually available and thus fits in this category).

• No more than three modules (not including AAM) should be provisioned together.
• Application Acceleration Manager (AAM) cannot be provisioned with any other module; AAM can only be provisioned standalone.
• Note that GTM and LC do not count toward the module-combination limit.
• Analytics (AVR) counts towards the two module-combination limit (for platforms with less than 6.25 GB of memory).

Memory: 4 GB or less

The following guidelines apply to the BIG-IP 1600 and 3600 platforms, and to VE and vCMP guests provisioned with 4 GB or less of memory.

• No more than two modules may be configured together.
• AAM should not be provisioned, except as Dedicated.

VIPRION and vCMP caching and deduplication requirements

Application Acceleration Manager (AAM) supports the following functionality when configuring vCMP and VIPRION platforms.

• AAM does not support disk-based caching functionality on vCMP platforms. AAM requires memory-based caching when configuring it to run on vCMP platforms.
• AAM supports disk-based caching functionality on VIPRION chassis or blades.
• AAM does not support deduplication functionality on vCMP platforms, or VIPRION chassis or blades.

vCMP memory provisioning calculations

The amount of memory provisioned to a vCMP guest is calculated using the following formula: (platform_memory - 3 GB) x (cpus_assigned_to_guest / total_cpus).

As an example, for the B2100 with two guests, provisioned memory calculates as: (16-3) x (2/4) ~= 6.5 GB.

iRules can be an AFM Rule Action

iRules support for AFM has been added in this release. Please visit F5 DevCentral for more information.

Per Virtual Server Network DoS rate limiting

Network DoS can now be configured as a separate DoS profile, and assigned per virtual server. These features are an early release. For 11.4.1, these features have the following restrictions.

• There is currently no GUI support for this feature.
• unlike the Global Flood Limits, Relative thresholds are not supported at this time.
• These features should be configured only with the assistance of your sales representative

The dos-network profile can be configured within a security DoS profile.

Add a security DoS profile for network DoS:

[create | modify | delete] security dos profile <profile_name> dos-network add { <profile_name> }

Set flood limits for UDP floods, TCP-SYN floods, and TCP-RST floods:

[create | modify | delete] security dos profile <profile_name> dos-network [add | del | modify] { <profile_name> { network-attack-vector add { tcp-syn-flood { rate-limit <value> rate-threshold <value> } } } }

Add the profile to a virtual server:

modify ltm virtual <virtual-name> profiles add <profile_name>

Software SYN Cookie Protection for nPath Routing

“In this release, you can now configure SYN cookie protection in a nPath routing environment. When configured, SYN traffic will be challenged with an RST handled solely on the BIG-IP device. Clients that attempt to reconnect will be accepted. If a client completes the challenge, the client is cached and traffic is allowed through to the configured pool. The system db variable TM.FlowState.Timeout controls how long entries are cached.

tmsh [create|modify] ltm profile fastl4 <profile_name> { loose-close enabled software-syn-cookie enabled hardware-syn-cookie disabled } }

Maximized Enterprise Application Delivery Value

To make it easier and more affordable to get the Software Defined Application Services capabilities all organizations need, F5 introduces three software bundle offerings: Good, Better, and Best.

Good

Provides intelligent local traffic management for increased operational efficiency and peak network performance of applications.

Better

Good plus enhanced network security, global server load balancing, and advanced application delivery optimization.

Best

Better plus advanced access management and total application security. Delivers the ultimate in security, performance, and availability for your applications and network.

You can learn more about these new software bundles from your F5 Networks Sales Representative.

Additional resources

You can find additional support resources and technical documentation through a variety of sources.

• The F5 Networks Technical Support web site: http://www.f5.com/support/
• The AskF5 web site: http://support.f5.com/kb/en-us.html
• The F5 DevCentral web site: http://devcentral.f5.com/
• AskF5 TechNews

F5 Networks Technical Support

Free self-service tools give you 24x7 access to a wealth of knowledge and technical support. Whether it is providing quick answers to questions, training your staff, or handling entire implementations from design to deployment, F5 services teams are ready to ensure that you get the most from your F5 technology.

AskF5

AskF5 is your storehouse for thousands of solutions to help you manage your F5 products more effectively. Whether you want to search the knowledge base periodically to research a solution, or you need the most recent news about your F5 products, AskF5 is your source.

F5 DevCentral

The F5 DevCentral community helps you get more from F5 products and technologies. You can connect with user groups, learn about the latest F5 tools, and discuss F5 products and technology.

AskF5 TechNews

Weekly HTML TechNews

The weekly TechNews HTML email includes timely information about known issues, product releases, hotfix releases, updated and new solutions, and new feature notices. To subscribe, click TechNews Subscription, complete the required fields, and click the Subscribe button. You will receive a confirmation. Unsubscribe at any time by clicking the Unsubscribe link at the bottom of the TechNews email.

Periodic plain text TechNews

F5 Networks sends a timely TechNews email any time a product or hotfix is released. (This information is always included in the next weekly HTML TechNews email.) To subscribe, send a blank email to technews-subscribe@lists.f5.com from the email address you are using to subscribe. Unsubscribe by sending a blank email to technews-unsubscribe@lists.f5.com.