Applies To:
Show Versions
F5 DDoS Hybrid Defender
- 15.0.0
Updated Date: 05/23/2019
Summary:
This release note covers 15.0.0-6.0.
Contents:
- Release Notes: F5 DDoS Hybrid Defender 15.0.0-6.0
- Platform support
- Browser support
- User documentation for this release
- New functionality by release
- Known issues
- Installation overview
- Contacting F5 Networks
- Legal notices
Summary DDoS Hybrid Defender 15.0.0-6.0
These release notes document the DDoS Hybrid Defender version 15.0.0-6.0 release. You can apply the software upgrade to systems running software version 13.1.0 or later.
Release Notes: F5 DDoS Hybrid Defender 15.0.0-6.0
This release note documents the 15.0.0-6.0 release of F5 DDoS Hybrid Defender.
Platform support
This version of F5 DDoS Hybrid Defender runs on the following platforms.
DDoS Hybrid Defender requires the appropriate DDoS license. It enables one module flag mod_dos. That is the only module that can be active on the system.
Browser support
DDoS Hybrid Defender supports these browsers and versions:
- Microsoft Internet Explorer 11.x
- Mozilla Firefox v40, or later
- Google Chrome v44, or later
User documentation for this release
For installation and setup instructions, refer to F5 DDoS Hybrid Defender: Setup. You can find this, and additional documentation that is relevant to this release, in the F5 DDoS Hybrid Defender 15.0.0 Knowledge Center.
New functionality by release
New in 15.0.0-6.0
Auto Discovery of services
DDhD can now discover services that have been processed by a protected object. You can then promote the discovered service to a protected object, and apply security policies and profiles.
BGP Flowspec actions
New BGP FlowSpec actions have been added for more granular control over scrubbing or redirecting IP addresses: Drop, Redirect, DSCP marking, and Ratelimit.
Hardware Registers
To better debug packet handling during a DoS/DDoS event, hardware registers display diagnostic statistics about how the system is handling packets in hardware.
IP Intelligence: Allow GEO locations.
This release supports the use of GEO locations in IP Intelligence categories.
IP Intelligence: Allow Fully Qualified Domain Names (FQDN).
This release supports the use of FQDNs in IP Intelligence categories.
Known issues
The following known issues apply to the current release of DDoS Hybrid Defender.
| ID number | Description |
|---|---|
| 680730 | The system cannot successfully create a high-availability (HA) pair if the device name and hostname are different. Workaround: Use the same name for both the device name and the hostname. |
Installation overview
This document covers very basic steps for installing the software. You can find complete, step-by-step installation and upgrade instructions in BIG-IP Systems: Upgrading Software, and we strongly recommend that you reference this information to ensure successful completion of the installation process.
Installation checklist
Before you begin:
- Use BIG-IP iHealth to verify your configuration file. For more information, see K12878: Generating BIG-IP diagnostic data using the qkview utility.
- Update/reactivate your system or vCMP host license, if needed, to ensure that you have a valid service check date. For more information, see K7727: License activation may be required prior to a software upgrade for the BIG-IP or Enterprise Manager system.
- Ensure that your system is running version 12.x or later.
- Download the .iso file from F5 Downloads to /shared/images on the source for the operation. (If you need to create this directory, use the exact name /shared/images.)
- Configure a management port.
- Set the console and system baud rate to 19200, if it is not already.
- Log on as an administrator using the management port of the system you want to upgrade.
- Check all DNSSEC Key generation's 'expiration' and 'rollover' date:time fields before performing a GTM sync group upgrade. If any of the DNSSEC Key generations are set to rollover or expire during the planned upgrade window, modify the date:time of the 'expiration' and/or 'rollover' fields to extend past the anticipated upgrade window, to a date:time when all units in the sync group will again have GTM config sync enabled.
- Boot into an installation location other than the target for the installation.
- Save the user configuration set (UCS) in the /var/local/ucs directory on the source installation location, and copy the UCS file to a safe place on another device.
- Log on to the standby unit, and only upgrade the active unit after the standby upgrade is satisfactory.
- Turn off mirroring.
- If you are running Application Acceleration Manager, set provisioning to Minimum.
- If you are running Policy Enforcement Manager, set provisioning to Nominal.
- If you are running Advanced Firewall Manager, set provisioning to Nominal.
Installing the software
| Installation method | Command |
|---|---|
| Install to existing volume, migrate source configuration to destination | tmsh install sys software image [image name] volume [volume name] |
| Install from the browser-based Configuration utility | Use the Software Management screens in a web browser. |
Sample installation command
The following command installs version 14.1.0 to volume 3 of the main hard drive.
tmsh install sys software image BIGIP-14.1.0-0.0.116.iso volume HD1.3
Post-installation tasks
This document covers very basic steps for installing the software. You can find complete, step-by-step installation and upgrade instructions in BIG-IP Systems: Upgrading Software, and we strongly recommend that you reference this information to ensure successful completion of the installation process.
- Ensure the system rebooted to the new installation location.
- Use BIG-IP iHealth to verify your configuration file. For more information, see K12878: Generating diagnostic data using the qkview utility.
- Log on to the browser-based Configuration utility.
- Run the Setup utility.
- Provision the modules.
Installation tips
- The upgrade process installs the software on the inactive installation location that you specify. This process usually takes between three minutes and seven minutes. During the upgrade process, you see messages posted on the screen. For example, you might see a prompt asking whether to upgrade the End User Diagnostics (EUD), depending on the version you have installed. To upgrade the EUD, type yes, otherwise, type no.
- You can check the status of an active installation operation by running the command watch tmsh show sys software, which runs the show sys software command every two seconds. Pressing Ctrl + C stops the watch feature.
- If installation fails, you can view the log file. The system stores the installation log file as /var/log/liveinstall.log.
Contacting F5 Networks
| Phone - North America: | 1-888-882-7535 or (206) 272-6500 |
| Phone - Outside North America, Universal Toll-Free: | +800 11 ASK 4 F5 or (800 11275 435) |
| Fax: | See Regional Support for your area. |
| Web: | https://support.f5.com/csp/home |
| Email: | support@f5.com |
For additional information, please visit http://www.f5.com.
