Release Notes for F5 Openstack Agent¶
v9.9.55.1 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- [OPENSTACK-2847] Disable icontrol token authentication by default
Bug Fixes¶
Limitations¶
v9.9.55 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- [OPENSTACK-2548]: Server check flavor
- [OPENSTACK-2552]: Add snat port NoneType check
- [OPENSTACK-2533]: Purge and disable ESD
- [OPENSTACK-2566]: Reserve one floating ip in large snat subnet
- [OPENSTACK-2522]: Update traffic-group-1 MAC
- [OPENSTACK-2587]: Upgrade to python sdk 3.0.11.5
- [OPENSTACK-2571]: Optimize deleting member performance
- [OPENSTACK-2626]: Raise exception when two bigips status are not both active
- [OPENSTACK-2638]: Enable iControl token authentication
- [OPENSTACK-2571]: Append route domain id to member node name
- [OPENSTACK-2611]: Only allow vxlan type network for fdb process
- [OPENSTACK-2441]: Listener support keepalive_timeout
- [OPENSTACK-2610]: Listener support proxy protocol
- [OPENSTACK-2690]: Change ACL functions for 9.9-stable public cloud
- [openstack-2698]: Agent timeout parameter change to apply to python requests timeout arg
Bug Fixes¶
- [OPENSTACK-2605]: Fix: member route domain
- [OPENSTACK-2646]: Fix: rate limit debug log
- [OPENSTACK-2632]: Fix: when update http2 filter clientside tcp profile
- [OPENSTACK-2666]: Fix: create client tcp profile when set keepalive_timeout
Limitations¶
v9.9.54 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- [OPENSTACK-2514] vip connection limit
- [OPENSTACK-2516] Include LTM license in agent configuration
- [OPENSTACK-2500] Support large SNAT pool
Bug Fixes¶
- [OPENSTACK-2513] fix ipv6 connection rate limit
Limitations¶
v9.9.53 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- [OPENSTACK-2512] Include VTEP IP address in Neutron port
Bug Fixes¶
Limitations¶
v9.9.52 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- [OPENSTACK-2490] Support flavor 11-13
Bug Fixes¶
Limitations¶
v9.9.51 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
Bug Fixes¶
- [OPENSTACK-2482] delete cafile for mtls profile.
Limitations¶
v9.9.50 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- [OPENSTACK-2406] Disable ESD refresh job
- [OPENSTACK-2426] Flavor snatpool function
- [OPENSTACK-2426] Dual stack and flavour SNAT with one Netron Port
- [OPENSTACK-2440] Enable ftp, https TOA
- [OPENSTACK-2440] Change https listener to standard model
- [OPENSTACK-2426] Remove member config snat ip
- [OPENSTACK-2474] Change port number
- [OPENSTACK-2482] Remove certs and keys as removing ssl profiles
- [OPENSTACK-2479] Dual-stack-snat
- [OPENSTACK-2479] Change member and add route
- [OPENSTACK-2381] Only update interval from api side
- [OPENSTACK-2425] Per dest addr
Bug Fixes¶
- [OPENSTACK-2483] Fix confusing logs to avoid misunderstanding.
Limitations¶
v9.9.40.patch2 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- [OPENSTACK-2284] refact: create route domain/vlan by net
- [OPENSTACK-2344] feat: use ‘–transparent’ to enable/disable xff
- [OPENSTACK-2344] chore: remove xff configuration in json file
Bug Fixes¶
- [OPENSTACK-2262] Fix IPv6 redirect host parsing
Limitations¶
v9.9.40.patch1 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- [OPENSTACK-2343] Support uppercase cipher policy name
- [OPENSTACK-2083] Add TOA feature
- [OPENSTACK-2083] Remove pervious tranparent function
- [OPENSTACK-2325] Add cipher policy config file
- [OPENSTACK-2262] Support redirect LTM policy
- [OPENSTACK-2325] Enable TLS cipher suites policy definition
- [OPENSTACK-2277] Add a periodic config save task
Bug Fixes¶
- [OPENSTACK-2282] Fix snat creation conflict issue
- [OPENSTACK-2342] Fix: selfip recreating unabled to catch HTTP 409
- [OPENSTACK-2295] Ensure route domain id consistency
- [OPENSTACK-2294] Fix: multiple agents updating snatpool member causes
- [OPENSTACK-2341] Fix: get all nodes in a partition
- [OPENSTACK-2253] Ensure source ip session persistence when lb algorithm is SOURCE_IP
Limitations¶
v9.9.40 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- Identify customized http profile
- Add the profile’s context when trying to update the listener’s profiles to avoid conflict.
- Enable tls+http2 profile support
Bug Fixes¶
- Fix TLS1.3 cipher group
- Fix the variable name conflicts with the input parameter.
- Use the full path name when creating a new profile.
Limitations¶
v9.9.31 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- New way for health monitor timeout
- Add udp sip diameter hm type
- Support http2 profile
- Support websocket profile
- Add disable option for HTTP2 and Websocket
Bug Fixes¶
- Avoid patching profile failure, if profile is not created
- If members exist, it will cause HTTP 409 ERROR
- Update profiles before retriving the profiles from bigip.
- Add rule and remove rule for ACLGroup
Limitations¶
v9.9.30 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- Add flavor support: connection limit and connection rate limit.
- Bind logging profile to http/terminated_https vs.
- Add checking status support and don’t send the members with status of none or checking.
- Add ACL feature.
- Support cipher options.
Enhancement¶
Limitations¶
v9.9.6 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- Revert the logging profile at this moment.
Bug Fixes¶
Limitations¶
v9.9.5 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
Bug Fixes¶
- Catch all exception for route domain creation.
- Fix the issue of deleting nodes and snat in bigip ha mode.
Limitations¶
v9.9.4 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
Bug Fixes¶
- Fix check nodes issue in current partition
Limitations¶
v9.9.3 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- use the pool-id address and port to update the port
- multiple agents update the members in order
Bug Fixes¶
- Fix the issue of route domain issue: id already exists
- change the member update status interval configurable
- convert bandwidth from string to int
- Fix the KeyError issue caused by heartbeat periodic task.
- Fix negative periodic value not taking effect
- by default disable the scrub agent task
- Fix rds cache polluted problem
- Cleanup all snat, vlan and self ip before removing partition
- Handle bigip status check
Limitations¶
v9.9.2 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- Login docker hub with an id under f5devcentral org
- Handle both None and ‘’ situations for listener[‘customized’]
- Ensure to overwrite persistence profile
- Tolerate persistence timeout in string type
- Change the algorithm from least-connection-node to least-connection-member for source_ip algorithm in neutorn
- Use HEAD or GET for monitor
- Remove persist profile from vs, if its default pool remove persistence
- When update listener with customized paramater then bind the new http profile to the listener
- Will not del the vs customized property. Use it when configuring the other bigips in cluster mode.
- use a new way to check if tls and customized properties change.
Bug Fixes¶
- Fix customized bug
- Fix ‘error opening BIG-IP - active:BIG-IP ready for provisioning’
Limitations¶
v9.9.1 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- Support session persistence timeout parameter in API
- Customerised timeout value in persistence iRule and tolerate negative or None value of persistence_timeout
- Add ‘–customized’ support for listener creation
- Add to configure options for sanity check for bwc
- Add the max bandwidth is 10000MB instead of 1000MB for bwc
- Change icontrol heartbeat interval as same as _report_state
- Support to modify lb operating_status accordingly
Bug Fixes¶
- Do not detach user defined persist profile when removing pool
- Fix listener exception log
- Fix member batch deletion breakdown
- Throw exception if no active bigips
- Fix backwards compatibility problem of SNAT pool member name
Limitations¶
v9.9.0 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- Support to create listener with client ca certificate.
- Support create/delete/update the irule profile and bwc policy dynamically when creating/deleting a loadbalancer.
- Remove the previous bwc function.
Bug Fixes¶
Limitations¶
v9.8.40 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- protocol 0 support
- listener tls support
Bug Fixes¶
- Fix operating status issue
- fix http profile issue
Limitations¶
v9.8.21 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
Bug Fixes¶
- Remove unnecessary dependency package
Limitations¶
v9.8.20 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- Support L7Policy and L7Rule in Agent lite mode
- Support FTP and TERMINATED_HTTPS protocol in Agent lite mode
- Support to create VS specific http profile, cookie persistence profile and source_addr persistence profile
Bug Fixes¶
- Fix HA sync bug in L2 network mode
Limitations¶
v9.8.19 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- Create virtual server specific http_cookie and source_addr persistence profile
Bug Fixes¶
- Improve the performance of route domain and partition cleanup
Limitations¶
v9.8.18 (Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.
Added Functionality¶
- Add a ‘lite’ mode for F5 OpenStack Agent, which can improve the performance to deploy BIG-IP configuration and also tolerate some of the manual configuration changes made by user in BIG-IP.
Bug Fixes¶
- Route domain and partition deleted while deleting loadbalancer.
Limitations¶
- Agent lite only works with F5 LBaaS driver whose performance mode is 3.
v9.8.6 (Mitaka, Newton, Ocata, Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Mitaka, Newton, Ocata, Pike and Queens Openstack releases.
Added Functionality¶
- snat transparent and udp
- bandwidth control
- diameter, SIP
Bug Fixes¶
Limitations¶
v9.8.3 (Mitaka, Newton, Ocata, Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Mitaka, Newton, Ocata, Pike and Queens Openstack releases.
Added Functionality¶
- Refresh esd with trigger
Bug Fixes¶
Limitations¶
v9.8.2 (Mitaka, Newton, Ocata, Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Mitaka, Newton, Ocata, Pike and Queens Openstack releases.
Added Functionality¶
- Enhanced Advanced Load Balancer(ALB).
- Added a switch to control whether or not b64decode 2 passwords
Bug Fixes¶
Limitations¶
v9.8.1 (Mitaka, Newton, Ocata, Pike, Queens)¶
NOTE: This version of F5 Openstack Agent supports Mitaka, Newton, Ocata, Pike and Queens Openstack releases.
Added Functionality¶
- Enhanced Advanced Load Balancer(ALB).
- Added support for Queens
- Added some HPB code
- Enabled REGEX comparison type for l7 rules
- Added some IPv6 code
Bug Fixes¶
Limitations¶
v9.8.0 (Mitaka, Newton, Ocata, Pike)¶
NOTE: This version of F5 Openstack Agent will support Mitaka, Newton, Ocata and Pike Openstack releases.
Added Functionality¶
Enhanced Advanced Load Balancer(ALB).
Add 2 profile types support in Enhanced Service Definition(ESD):
- HTTP profile.
- OneConnect profile.
Bug Fixes¶
- Can not create selfip in both units using the same route domain ids.
- Deletes incorrect route domain.