v3.28.0

Updated the repository for AS3 v3.28.0. This release contains the following changes. See the Document revision history for more information and links.

• Added support for retrieving data from URLs using token bearer authentication
• Added support for excluding host names from SSL Forward Proxy Bypass
• Added support for HTTP Method conditions in Endpoint policies

Issues Resolved:

• Websecurity profile incorrectly being applied
• Declaration fails when shareAddresses is used with redirect80, GitHub Issue #419
• APM created nodes cause conflict failures
• clientTLS specified on unsupported Service returns “undefined” error, GitHub Issue #304
• Authentication failure on remote target host
• Normalize octal IP addresses into decimal format

v3.26.1

Updated the repository for AS3 v3.26.1 LTS. This release contains the following changes. See the Document revision history for more information and links.

• Released AS3 3.26.1 as a LTS (Long Term Support) version. See the AS3 SUPPORT.md for information about the AS3 support policy.
• AS3 3.26 failed installation on 12.1.x. This release is a rebuild with a different rpmbuild version with no functional changes. GitHub Issue #446

v3.27.0

Updated the repository for AS3 v3.27.0. This release contains the following changes. See the Document revision history for more information and links.

• Added support for using Tcl set-variable actions in an Endpoint policy
• Added support for enabling MQTT profiles in a declaration
• Added support for specifying GCE project IDs in a service discovery declaration
• Added support for creating PostgreSQL monitors
• Updated the FAQ to state that BIG-IP/TMOS v13.x is now the minimum supported version for AS3
• ARP and ICMP Echo are now disabled on virtual addresses when using Service_Forwarding, GitHub Issue #325
• Improved the performance of ASM policy fetches

Issues Resolved:

• Virtual server missing profile required by iRule with WEBSSO
• /Common/Shared nodes conflict with shared nodes, GitHub Issue #340
• Unable to delete shared nodes that use fqdnPrefix property, GitHub Issue #416
• Handling of escaped quotation mark is incorrect, GitHub Issue #408
• SD error when show=expanded, GitHub Issue #401
• Cannot read property ‘forEach’ of undefined, GitHub Issue #418
• Global lock is sometimes released twice, GitHub Issue #406
• iRule expansion doesn’t work inside iRule imported via URL
• Updated schema description for Policy_Action_Persist disable property, GitHub Issue #426
• Removed f5label and f5remark (GitHub Issue #234) and f5base64 and f5long-id custom schema formats

v3.26.0

Updated the repository for AS3 v3.26.0. This release contains the following changes. See the Document revision history for more information and links.

• Added support for Bot defense in Security Log profiles
• Added support for embedding a WAF policy in a declaration
• Added support for referencing existing API Protection profiles in a declaration
• Added a new EXPERIMENTAL feature for Unchecked mode
• Note: AS3 3.26 is the last release that will support BIG-IP/TMOS v12.1

Issues Resolved:

• Using GET on the /info or /declare endpoint causes BIG-IP to go into “Changes Pending” in HA, GitHub #391
• Unchecked mode support for iControl_post commands
• FQDN service discovery does not create node in /Common when shareNodes: true, GitHub Issue #409
• Fix handling of Certificate chainCA references, GitHub Issue #410
• “Cannot convert undefined or null to object” when configuring consul via BIG-IQ
• GSLB Wide IP last-resort-pool now requires a value if in the CLI

v3.25.0

Updated the repository for AS3 v3.25.0. This release contains the following changes. See the Document revision history for more information and links.

• Added the enabled property for GSLB pool members
• Added support for enabling or disabling server renegotiation on TLS Client and Server classes
• Added support for enabling or disabling certificate retention on TLS Client and Server classes
• Added support for HTTP/2 health monitors
• Added support for Azure Managed Identities when using Azure Service Discovery
• Added a note to best practices not to increase restjavad memory allocation to more than 2500MB
• The version of AS3 is now displayed in the logs on startup

Issues Resolved:

• Service failure when including reference to Service_Address and SNAT is set to self
• HTTP2 profiles are not compatible with Service_HTTP, GitHub Issue 172
• Service source address does not match route domain of Service_Address on BIG-IP
• Access profiles not updated if they are referenced by an iRule
• Unable to delete string data-group record with port, GitHub Issue 378
• Imported Access Profiles leave duplicates in tenant root
• Service in /Common is not idempotent, GitHub Issue 370
• Unable to create an Endpoint_Policy when using semi-colons
• Data store interactions cause errors in mcpd log, GitHub Issue 122

v3.24.0

Updated the repository for AS3 v3.24.0. This release contains the following changes. See the Document revision history for more information and links.

• Added support for the depends-on property for GSLB pools
• Added an example declaration for creating SNAT pools
• Added support for referencing Advanced WAF (AWAF) policies
• Added support for using an FQDN prefix for BIG-IP nodes
• Added the ability to configure async task storage through /settings
• Added support for environment variables when creating External monitors
• Added support for egress HTTP/2 profiles
• Added support for the HTTP message routing framework (MRF) on a virtual server, GitHub Issue 242
• Added support for discovering Consul ports using JMESPath queries in Service Discovery
• Added support for the Consul Health API for Consul Service Discovery
• Removed the page for AS3 in a Container, as that community-supported solution has been deprecated
• Added chainCA to applicable HTTPS example declarations, for example Using multiple SSL/TLS certificates, GitHub Issue 285
• Added support for allowing the $schema property in the ADC and AS3 classes for validating in local environments only, GitHub Issue 173
• Added an example declaration for creating a GSLB pool
• Added support for updating APM policies in a declaration, and with associated notes to the Access-related examples and Warnings, Notes, and Tips pages stating updating Access Policy Management objects can be a slow process and may cause AS3 declarations to take longer to apply

Issues Resolved:

• Unable to overwrite WAF policy settings if URL does not end with .xml
• IPv6 source address of :: is mangled and configured as :
• CIDR address not applied to redirect server, GitHub Issue 345
• Incorrect Service netmask value from Service_Address on BIG-IP, GitHub Issue 339
• Use style pointers do not work across multiple declarations, GitHub Issue 313

v3.23.0

Updated the repository for AS3 v3.23.0. This release contains the following changes. See the Document revision history for more information and links.

• Added support for Alert Timeouts for TLS_Client and TLS_Server
• Added the Address_Discovery class to allow multiple pools to use Service Discovery results
• Added support for a keep alive interval in Fast L4 profiles
• Added support for referencing external Per-Request Access polices via URL
• Added the /settings endpoint for enabling burst handling
• Added support for Burst Handling
• Added support for referencing NTLM profiles
• Added support for enabling APM Access Policies in a declaration
• Added support for creating mySQL monitors
• The community-supported solution for AS3 running in a Docker container is being archived as of AS3 3.23.0. F5 will no longer provide new versions of AS3 running in a container.

Issues Resolved:

• Fix GSLB_Topology_Region reference to other GSLB_Topology_Region within a declaration
  Corrected the first example declaration in Using SSL Certificates in an HTTPS monitor
• Corrected example declaration for C3D features

v3.22.1

Updated the repository for AS3 v3.22.1. This release contains the following changes. See the Document revision history for more information and links.

This release contains the following Issues Resolved:

• Removed optional dependencies from the 3.22.0 RPM build
• Schema is unreliable if application template is undefined, GitHub Issue 317
• Fix Service virtualAddresses idempotency when using 0.0.0.0 and shareAddresses set to true, GitHub Issue 319

v3.22.0

Updated the repository for AS3 v3.22.0. This release contains the following changes. See the Document revision history for more information and links.

• Added support for referencing Azure Scale Sets in a Service Discovery declaration
• Added a troubleshooting entry for a restjavad issue
• Updated the support notice for the community-supported AS3 Container to remove mention of the container being fully supported in the future
• Added support for BIG-IP 16.0

Issues Resolved:

• Duplicate botDefense profiles cause error, GitHub Issue 273

v3.21.0

Updated the repository for AS3 v3.21.0. This release contains the following changes. See the Document revision history for more information and links.

Updated the documentation for AS3 v3.21.0 This release contains the following changes:

• Added support for specifying a GSLB virtual server name in a declaration
• Added support for using URLs that reference .gz files
• Added support for Cache Timeout for TLS_Client and TLS_Server
• Added support for Immediate Action on Service Down
• Added a new AS3 Best Practices page.
• Modified the API Methods page and added a link to a new OpenAPI Reference page

Issues Resolved:

• Increase maximum value of HTTP_Compress bufferSize to 4294967295, GitHub Issue 284
• Incorrect property name in DNS cache example declaration
• Unable to use SRV records in DNS local zones, GitHub Issue 282
• Receiving “wrong # args” in cli script error messages
• Access_Profile import fails with garbled response, GitHub Issue 246
• Data store memory leak, GitHub Issue 263
• Unable to delete declaration after pool monitor modification, GitHub Issue 110
• Multi-tenant declarations fail when sharing addresses across tenants