Release Notes for F5 Openstack Agent

v9.9.55.1 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • [OPENSTACK-2847] Disable icontrol token authentication by default

Bug Fixes

Limitations

v9.9.55 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • [OPENSTACK-2548]: Server check flavor
  • [OPENSTACK-2552]: Add snat port NoneType check
  • [OPENSTACK-2533]: Purge and disable ESD
  • [OPENSTACK-2566]: Reserve one floating ip in large snat subnet
  • [OPENSTACK-2522]: Update traffic-group-1 MAC
  • [OPENSTACK-2587]: Upgrade to python sdk 3.0.11.5
  • [OPENSTACK-2571]: Optimize deleting member performance
  • [OPENSTACK-2626]: Raise exception when two bigips status are not both active
  • [OPENSTACK-2638]: Enable iControl token authentication
  • [OPENSTACK-2571]: Append route domain id to member node name
  • [OPENSTACK-2611]: Only allow vxlan type network for fdb process
  • [OPENSTACK-2441]: Listener support keepalive_timeout
  • [OPENSTACK-2610]: Listener support proxy protocol
  • [OPENSTACK-2690]: Change ACL functions for 9.9-stable public cloud
  • [openstack-2698]: Agent timeout parameter change to apply to python requests timeout arg

Bug Fixes

  • [OPENSTACK-2605]: Fix: member route domain
  • [OPENSTACK-2646]: Fix: rate limit debug log
  • [OPENSTACK-2632]: Fix: when update http2 filter clientside tcp profile
  • [OPENSTACK-2666]: Fix: create client tcp profile when set keepalive_timeout

Limitations

v9.9.54 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • [OPENSTACK-2514] vip connection limit
  • [OPENSTACK-2516] Include LTM license in agent configuration
  • [OPENSTACK-2500] Support large SNAT pool

Bug Fixes

  • [OPENSTACK-2513] fix ipv6 connection rate limit

Limitations

v9.9.53 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • [OPENSTACK-2512] Include VTEP IP address in Neutron port

Bug Fixes

Limitations

v9.9.52 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • [OPENSTACK-2490] Support flavor 11-13

Bug Fixes

Limitations

v9.9.51 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

Bug Fixes

  • [OPENSTACK-2482] delete cafile for mtls profile.

Limitations

v9.9.50 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • [OPENSTACK-2406] Disable ESD refresh job
  • [OPENSTACK-2426] Flavor snatpool function
  • [OPENSTACK-2426] Dual stack and flavour SNAT with one Netron Port
  • [OPENSTACK-2440] Enable ftp, https TOA
  • [OPENSTACK-2440] Change https listener to standard model
  • [OPENSTACK-2426] Remove member config snat ip
  • [OPENSTACK-2474] Change port number
  • [OPENSTACK-2482] Remove certs and keys as removing ssl profiles
  • [OPENSTACK-2479] Dual-stack-snat
  • [OPENSTACK-2479] Change member and add route
  • [OPENSTACK-2381] Only update interval from api side
  • [OPENSTACK-2425] Per dest addr

Bug Fixes

  • [OPENSTACK-2483] Fix confusing logs to avoid misunderstanding.

Limitations

v9.9.40.patch2 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • [OPENSTACK-2284] refact: create route domain/vlan by net
  • [OPENSTACK-2344] feat: use ‘–transparent’ to enable/disable xff
  • [OPENSTACK-2344] chore: remove xff configuration in json file

Bug Fixes

  • [OPENSTACK-2262] Fix IPv6 redirect host parsing

Limitations

v9.9.40.patch1 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • [OPENSTACK-2343] Support uppercase cipher policy name
  • [OPENSTACK-2083] Add TOA feature
  • [OPENSTACK-2083] Remove pervious tranparent function
  • [OPENSTACK-2325] Add cipher policy config file
  • [OPENSTACK-2262] Support redirect LTM policy
  • [OPENSTACK-2325] Enable TLS cipher suites policy definition
  • [OPENSTACK-2277] Add a periodic config save task

Bug Fixes

  • [OPENSTACK-2282] Fix snat creation conflict issue
  • [OPENSTACK-2342] Fix: selfip recreating unabled to catch HTTP 409
  • [OPENSTACK-2295] Ensure route domain id consistency
  • [OPENSTACK-2294] Fix: multiple agents updating snatpool member causes
  • [OPENSTACK-2341] Fix: get all nodes in a partition
  • [OPENSTACK-2253] Ensure source ip session persistence when lb algorithm is SOURCE_IP

Limitations

v9.9.40 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • Identify customized http profile
  • Add the profile’s context when trying to update the listener’s profiles to avoid conflict.
  • Enable tls+http2 profile support

Bug Fixes

  • Fix TLS1.3 cipher group
  • Fix the variable name conflicts with the input parameter.
  • Use the full path name when creating a new profile.

Limitations

v9.9.31 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • New way for health monitor timeout
  • Add udp sip diameter hm type
  • Support http2 profile
  • Support websocket profile
  • Add disable option for HTTP2 and Websocket

Bug Fixes

  • Avoid patching profile failure, if profile is not created
  • If members exist, it will cause HTTP 409 ERROR
  • Update profiles before retriving the profiles from bigip.
  • Add rule and remove rule for ACLGroup

Limitations

v9.9.30 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • Add flavor support: connection limit and connection rate limit.
  • Bind logging profile to http/terminated_https vs.
  • Add checking status support and don’t send the members with status of none or checking.
  • Add ACL feature.
  • Support cipher options.

Enhancement

Limitations

v9.9.6 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • Revert the logging profile at this moment.

Bug Fixes

Limitations

v9.9.5 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

Bug Fixes

  • Catch all exception for route domain creation.
  • Fix the issue of deleting nodes and snat in bigip ha mode.

Limitations

v9.9.4 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

Bug Fixes

  • Fix check nodes issue in current partition

Limitations

v9.9.3 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • use the pool-id address and port to update the port
  • multiple agents update the members in order

Bug Fixes

  • Fix the issue of route domain issue: id already exists
  • change the member update status interval configurable
  • convert bandwidth from string to int
  • Fix the KeyError issue caused by heartbeat periodic task.
  • Fix negative periodic value not taking effect
  • by default disable the scrub agent task
  • Fix rds cache polluted problem
  • Cleanup all snat, vlan and self ip before removing partition
  • Handle bigip status check

Limitations

v9.9.2 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • Login docker hub with an id under f5devcentral org
  • Handle both None and ‘’ situations for listener[‘customized’]
  • Ensure to overwrite persistence profile
  • Tolerate persistence timeout in string type
  • Change the algorithm from least-connection-node to least-connection-member for source_ip algorithm in neutorn
  • Use HEAD or GET for monitor
  • Remove persist profile from vs, if its default pool remove persistence
  • When update listener with customized paramater then bind the new http profile to the listener
  • Will not del the vs customized property. Use it when configuring the other bigips in cluster mode.
  • use a new way to check if tls and customized properties change.

Bug Fixes

  • Fix customized bug
  • Fix ‘error opening BIG-IP - active:BIG-IP ready for provisioning’

Limitations

v9.9.1 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • Support session persistence timeout parameter in API
  • Customerised timeout value in persistence iRule and tolerate negative or None value of persistence_timeout
  • Add ‘–customized’ support for listener creation
  • Add to configure options for sanity check for bwc
  • Add the max bandwidth is 10000MB instead of 1000MB for bwc
  • Change icontrol heartbeat interval as same as _report_state
  • Support to modify lb operating_status accordingly

Bug Fixes

  • Do not detach user defined persist profile when removing pool
  • Fix listener exception log
  • Fix member batch deletion breakdown
  • Throw exception if no active bigips
  • Fix backwards compatibility problem of SNAT pool member name

Limitations

v9.9.0 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • Support to create listener with client ca certificate.
  • Support create/delete/update the irule profile and bwc policy dynamically when creating/deleting a loadbalancer.
  • Remove the previous bwc function.

Bug Fixes

Limitations

v9.8.40 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • protocol 0 support
  • listener tls support

Bug Fixes

  • Fix operating status issue
  • fix http profile issue

Limitations

v9.8.21 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

Bug Fixes

  • Remove unnecessary dependency package

Limitations

v9.8.20 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • Support L7Policy and L7Rule in Agent lite mode
  • Support FTP and TERMINATED_HTTPS protocol in Agent lite mode
  • Support to create VS specific http profile, cookie persistence profile and source_addr persistence profile

Bug Fixes

  • Fix HA sync bug in L2 network mode

Limitations

v9.8.19 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • Create virtual server specific http_cookie and source_addr persistence profile

Bug Fixes

  • Improve the performance of route domain and partition cleanup

Limitations

v9.8.18 (Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Pike and Queens Openstack releases.

Added Functionality

  • Add a ‘lite’ mode for F5 OpenStack Agent, which can improve the performance to deploy BIG-IP configuration and also tolerate some of the manual configuration changes made by user in BIG-IP.

Bug Fixes

  • Route domain and partition deleted while deleting loadbalancer.

Limitations

  • Agent lite only works with F5 LBaaS driver whose performance mode is 3.

v9.8.6 (Mitaka, Newton, Ocata, Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Mitaka, Newton, Ocata, Pike and Queens Openstack releases.

Added Functionality

  • snat transparent and udp
  • bandwidth control
  • diameter, SIP

Bug Fixes

Limitations

v9.8.3 (Mitaka, Newton, Ocata, Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Mitaka, Newton, Ocata, Pike and Queens Openstack releases.

Added Functionality

  • Refresh esd with trigger

Bug Fixes

Limitations

v9.8.2 (Mitaka, Newton, Ocata, Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Mitaka, Newton, Ocata, Pike and Queens Openstack releases.

Added Functionality

  • Enhanced Advanced Load Balancer(ALB).
    • Added a switch to control whether or not b64decode 2 passwords

Bug Fixes

Limitations

v9.8.1 (Mitaka, Newton, Ocata, Pike, Queens)

NOTE: This version of F5 Openstack Agent supports Mitaka, Newton, Ocata, Pike and Queens Openstack releases.

Added Functionality

  • Enhanced Advanced Load Balancer(ALB).
    • Added support for Queens
    • Added some HPB code
    • Enabled REGEX comparison type for l7 rules
    • Added some IPv6 code

Bug Fixes

Limitations

v9.8.0 (Mitaka, Newton, Ocata, Pike)

NOTE: This version of F5 Openstack Agent will support Mitaka, Newton, Ocata and Pike Openstack releases.

Added Functionality

  • Enhanced Advanced Load Balancer(ALB).

    Add 2 profile types support in Enhanced Service Definition(ESD):

    • HTTP profile.
    • OneConnect profile.

Bug Fixes

  • Can not create selfip in both units using the same route domain ids.
  • Deletes incorrect route domain.

Limitations