IM Package

For Deep Packet Inspection (DPI) use case, the IM Package has to be downloaded. The IM Package contains all the applications and categories supported for the DPI.

Procedure

  1. Login to my F5.

    Note: You must have MyF5 account to login.

  2. Navigate to Support Resources and click Downloads.

  3. Check the box for End User License Agreement and Program Terms, then click Next.

  4. Choose BIG-IP_Next from Select a Product Family Group drop-down menu.

  5. Select DPI-SignatureUpdates from the Product Line and desired version from the Product Version drop-down list.

  6. Select the latest IM package based on the timestamp.

    Note: For every IM package, a Apps.pdf file is maintained. This file contains all the applications that the IM package installs.

  7. Once the latest IM package is downloaded, copy the IM package to the downloader pod location at /var/downloader-localfile-upload/.

    Run the following command to copy the IM Package:

    oc cp <downloaded_IM Package> <name_space>/<downloader_pod>:/var/downloader-localfile-upload/

    Example:

    oc cp dpi_updates_0.6.79-20250212_1017.im default/f5-downloader-6fcdb9949d-72rk8:/var/downloader-localfile-upload/

  8. Verify that the downloader pod is successfully downloaded.

  9. Once the IM package is successfully copied to the downloader pod, apply the downloader CR.

    Copy and paste the following downloader CR into an YAML file and apply.

apiVersion: "k8s.f5net.com/v1"
kind: F5BigCneDownloader
metadata:
  name: "downloadpolicy-urldb"
spec:
  components:
    - type: "wr-urldb"
      downloadUrl: "api-dualstack.bcti.brightcloud.com"
      pollInterval: "30m"
      mode: "online"
  1. Once the CR is successfully applied and verified, the f5-big-pe-policies.k8s.f5net.com CRD must be updated with all the latest applications and categories available in the IM Package.

  2. Verify the IM Package is successfully loaded. Run the following command.

    /tmctl -d blade dpi_libs_state

Note: To verify the dpi_libs_state stat, secure context and DPI profile CRs should be applied. Attach the DPI profile in the secure context CR.

_**Sample Output:**_

```bash
tmm blade filename                                                   version
--- ----- ---------------------------------------------------------- ---------
  1     1 /usr/lib64/libcec.debug.so                                 mbip-next
  1     1 /var/download/dpi/libcec.debug.-20250212_1017.so0382666843 mbip-next
  0     1 /usr/lib64/libcec.debug.so                                 mbip-next
  0     1 /var/download/dpi/libcec.debug.-20250212_1017.so0382666843 mbip-next

loaded           state_msg flows_processed flows_active
---------------- --------- --------------- ------------
2025-03-11 03:33 Unloaded                0            0
2025-03-11 04:22 Active                  0            0
2025-03-11 03:33 Unloaded                0            0
2025-03-11 04:22 Active                  1            0
```

Feedback

To provide feedback and help improve this document, please email us at cnfdocs@f5.com.