F5BigCneAddresslist

Overview

The F5BigCneAddresslist Custom Resource (CR) is useful for creating larger, more complex lists of IP addresses. This can be used in the Denial of Service (DoS/DDoS) event detection and mitigation CR (F5BigDdosGlobal CR) and ACL Policies (F5BigFwPolicy, F5BigFwRulelist CRs).

Parameters

metadata

Parameter	Description
name	The unique name identifying the resource (Kubernetes object name). Example: my-addresslist.
namespace	The Kubernetes namespace in which the resource is created.

spec

The CR spec parameters used for creating larger, more complex lists of IP addresses are:

Parameter	Description	Default
addresses	The IPv4 or IPv6 addresses included in the address list: host 2002::10:10:10:1, subnet 2002::10:10:0:0/96, or range 2002::10:10:10:1-2002::10:10:10:20.	[]
addressLists	This is a string which refers to another addresslist that consists of either IP addresses or child addresslists.	[]

Sample CR

apiVersion: k8s.f5net.com/v1
kind: F5BigCneAddresslist
metadata:
  name: fw-drop-ipaddresses
  namespace: f5-bnk
spec:
  addresses:
     - "11.19.10.6"
     - "11.19.10.7"
  addressLists:
     - "drop-ipaddresses-ipv6"
---
apiVersion: k8s.f5net.com/v1
kind: F5BigCneAddresslist
metadata:
  name: drop-ipaddresses-ipv6
  namespace: f5-bnk
spec:
  addresses:
     - "bb11::19:10:6"
     - "bb11::19:10:7"

Create and apply F5BigCneAddresslist CR

1. Copy the sample CR into a YAML <addresslist.yaml> file.

2. Apply the F5BigCneAddresslist CR:

   ptt@mgx-2:~$ kubectl create -f addresslist.yaml
   f5bigcneaddresslist.k8s.f5net.com/fw-drop-ipaddresses created
   f5bigcneaddresslist.k8s.f5net.com/drop-ipaddresses-ipv6 created
   
   kubectl get -f addresslist.yaml -n f5-bnk
   NAME                    READY   MESSAGE                                AGE
   fw-drop-ipaddresses     True    CR config sent to all grpc endpoints   6s
   drop-ipaddresses-ipv6   True    CR config sent to all grpc endpoints   6s
   

   The log message indicates that the F5BigCneAddresslist CR was added/updated:

   kubectl describe -f addresslist.yaml -n f5-bnk
   

   Status:
     Conditions:
       Last Transition Time:  2026-03-18T11:19:31Z
       Message:
       Observed Generation:   0
       Reason:                Accepted
       Status:                True
       Type:                  Accepted
       Last Transition Time:  2026-03-18T11:19:31Z
       Message:               CR config sent to all grpc endpoints
       Observed Generation:   2
       Reason:                Programmed
       Status:                True
       Type:                  Programmed
     Generation Id:           0
   Events:
     Type    Reason         Age   From               Message
     ----    ------         ----  ----               -------
     Normal  Added/Updated  11s   f5-cne-controller  F5AddressListProfile f5-bnk/fw-drop-ipaddresses was added/updated
   
   ..
   Status:
     Conditions:
       Last Transition Time:  2026-03-18T11:19:31Z
       Message:
       Observed Generation:   0
       Reason:                Accepted
       Status:                True
       Type:                  Accepted
       Last Transition Time:  2026-03-18T11:19:31Z
       Message:               CR config sent to all grpc endpoints
       Observed Generation:   2
       Reason:                Programmed
       Status:                True
       Type:                  Programmed
     Generation Id:           0
   Events:
     Type    Reason         Age   From               Message
     ----    ------         ----  ----               -------
     Normal  Added/Updated  11s   f5-cne-controller  F5AddressListProfile f5-bnk/drop-ipaddresses-ipv6 was added/updated