F5FtpSetting¶

The F5FtpSetting Custom Resource (CR) defines the FTP profile settings for F5 BIG-IP Local Traffic Manager (LTM) on cloud-native network functions (CNFs). You attach this profile to a virtual server to enable FTP traffic processing.

CR parameters¶

The tables below describe the F5FtpSetting CR parameters.

metadata¶

Parameter	Description
`name`	The name of the FTP profile. This value is referenced by the traffic management CNF CRs.
`namespace`	Specifies the namespace in which the FTP profile will be installed.

Spec¶

Field	Type	Default	Description
`allowActiveMode`	Boolean	`true`	Enables active mode of FTP data transfer. Set to `false` to restrict transfers to passive mode only.
`allowFtpsMode`	String		Controls FTPS (FTP over TLS) behavior. Accepted values: `disallow` — resets connections from clients that send AUTH SSL or AUTH TLS. `allow` — permits explicit FTPS negotiation; after the transition, the virtual server enters pass-through mode and only supports passive-mode data connections. `require` — requires that both client and server use the STARTTLS exchange for FTP operations.
`dataPort`	Integer	`20`	Sets the port number for FTP data connections. Change this if your environment uses a non-standard data port.
`enforceTlsSessionReuse`	Boolean	`false`	When enabled, the system rejects data connections that don't reuse the TLS session from the control channel. When disabled, the system reuses the server-side TLS session based on client-side TLS session information without enforcing it.
`inheritParentProfile`	Boolean	`false`	When enabled, the FTP data channel inherits the TCP profile from the control channel. When disabled, the data channel uses FastL4 only.
`inheritVlanList`	Boolean	`false`	Data channel inherits the VLAN interface list from the control channel. If enabled, the data channel is restricted to the same VLANs as the control channel.
`translateExtended`	Boolean	`true`	Ensures compatibility between IPv4 and IPv6 clients and servers when they use the FTP protocol. Translates FTP extended commands (EPSV, EPRT) to their standard equivalents (PASV, PORT) and vice versa.

CR Example¶

apiVersion: "k8s.f5net.com/v1"
kind: F5BigFtpProfile
metadata:
  name: "cnf-ftpprofile"
  namespace: "cnf-gateway"
spec:
  translateExtended: true
  inheritParentProfile: false
  inheritVlanList: false
  dataPort: 20
  allowActiveMode: false
  allowFtpsMode: "disallow"
  enforceTlsSessionReuse: false

Requirements¶

Ensure you have:

Installed the CNF Controller Pods.
A Linux based workstation.

Installation¶

Use the following steps to install the F5BigFtpProfile CR.

Copy the F5BigFtpProfile CR example into a YAML file:

apiVersion: "k8s.f5net.com/v1"
kind: F5BigFtpProfile
metadata:
  name: "cnf-ftpprofile"
  namespace: "cnf-gateway"
spec:
  translateExtended: true
  inheritParentProfile: false
  inheritVlanList: false
  dataPort: 20
  allowActiveMode: false
  allowFtpsMode: "disallow"
  enforceTlsSessionReuse: false

Install the F5BigFtpProfile CR:
```
oc apply -f cnf-ftpprofile-cr.yaml
```

Reference the F5BigFtpProfile CR from your virtual server CR.

apiVersion: k8s.f5net.com/v1
kind: F5VirtualServer
metadata:
  name: vs-ftp
  namespace: default
spec:
  destinationAddress: 22.22.22.210
  destinationPort: 21
  protocol: tcp
  protocolProfile:
    clientside: sys-default-tcp
    serverside: sys-default-tcp
  pool: ftp-pool
  snat:
    type: automap
  ftp:
    clientside: cnf-ftpprofile