Reference: Application migration status

Application service and virtual server statuses indicate whether an application service is ready to deploy, or require modifications to unsupported objects. Unsupported objects are either remove, replaced, or must be saved as a draft for manual editing.

Statuses

image Ready for migration

This status indicates that all objects are supported and the application services are ready to save as a draft. No automatic changes will be made to the virtual servers during the migration process.

image Unsupported objects, manual action required

This status does not indicate that the application service is ready to migrate. The application service requires a manual action when the objects or properties are not supported by BIG-IP Next.

For example, you might need to replace unsupported shared objects (like certificates or WAF/Access policies), update a virtual server to use only one SSL profile of same type (as multiple profiles are not supported), update VLANs a virtual server is enabled/disabled on, or select a single WAF policy if multiple ones are assigned to a virtual server.

Application services can be saved as a draft. You can only deploy to a BIG-IP Next instance after you edit the application service:

  • Unsupported Certificates and Keys - SSL certificate and key pairs that are unsupported will show this status. This version of BIG-IP Next supports cipher suites that use these algorithms:

    • RSA (2048/3072/4096)

    • ECDSA (prime256v1/secp384r1)

    Any other application services with unsupported certificates and keys (e.g. DSA) are saved as draft and the certificate(s) are removed and replaced with placeholder text. Add a supported certificate to CM and add a reference to it from the migrated application draft, replace the placeholder text, and then deploy the application service.

    Note: Mutual Transport Layer Security (mTLS) is not supported during the migration. A certificate and key pair from a Server SSL profile with this service can be imported, but won’t be attached to the application service.

  • Multiple SSL profiles on a single virtual server - If multiple SSL profiles of the same type (for example, multiple client SSL OR server SSL profiles) are attached to one virtual server, the application service and its affected virtual server will be marked with this status and duplicate profiles are removed and replaced with placeholder text. Select one SSL profile (of the same type) per virtual server to deploy the application service.

  • Mutiple security policies converted succesfully - If multiple WAF or Access policies are converted, security policies of the same type are removed and replaced with placeholder text.

    Select one security policy (of the same type) per virtual server to deploy the application service.

  • Virtual server with one security policy of the same type not converted successfully - If one WAF or Access policy was not converted, security policies of the same type (regardless of conversion status) are removed and replaced with placeholder text.

    Select one valid security policy (of the same type) per virtual server to deploy the application service.

  • Virtual server enabled or disabled on a VLAN(s) - If a virtual server is configured with a specific VLAN, the original VLAN name is removed and replaced with a placeholder text.

    Select valid VLAN(s) that are configured on a designated BIG-IP Next where the application will be deployed.

image Unsupported objects

An application service shows a red status in the following two cases:

  • It contains unsupported objects or properties, but you can still save these to BIG-IP Next Central Manager.

  • One or more virtual servers are not supported by BIG-IP Next, so you cannot save these to BIG-IP Next Central Manager.

If an application service has this status due to a virtual server, move the virtual server to an application service you do not want to migrate or create an application service and move unsupported virtual servers to it.

The unsupported objects or properties are automatically removed when you save the application service as draft.