# F5 Technical Articles **URL:** https://community.f5.com/c/articles/technical-articles/21.md [Latest](https://community.f5.com/latest.md) · [Categories](https://community.f5.com/categories.md) · [Tags](https://community.f5.com/tags.md) --- ## [About the F5 Technical Articles category](https://community.f5.com/t/about-the-f5-technical-articles-category/92)
**Author:** [@system](https://community.f5.com/u/system)\ **Replies:** 0\ **Last updated:** [June 24, 2026, 4:07am UTC](https://community.f5.com/t/about-the-f5-technical-articles-category/92 "2026-06-24T04:07:30Z")
Deep dives, how‑tos, and expert insights to help you learn, build, and scale with F5 technologies. This space is for structured, high-signal content—walkthroughs, architecture patterns, lessons learned, and detailed exp… --- ## [What’s new in F5 Insight for ADSP v2.0?](https://community.f5.com/t/what-s-new-in-f5-insight-for-adsp-v2-0/77639)
**Author:** [@KevinGallaugher](https://community.f5.com/u/KevinGallaugher)\ **Replies:** 0\ **Last updated:** [October 29, 2026, 5:36pm UTC](https://community.f5.com/t/what-s-new-in-f5-insight-for-adsp-v2-0/77639 "2026-10-29T17:36:28Z")
Introduction F5 Insight for ADSP, a key component of the F5 Application Delivery and Security Platform (ADSP), helps teams monitor and secure apps that are spread across hybrid, multi-cloud and AI environments. In this… --- ## [CVE-2022-22965 (Spring4Shell): Remote Code Execution via Data Binding and HTTP-Layer Mitigation with BIG-IP Advanced WAF](https://community.f5.com/t/cve-2022-22965-spring4shell-remote-code-execution-via-data-binding-and-http-layer-mitigation-with-big-ip-advanced-waf/77637)
**Author:** [@Shubham\_Mishra](https://community.f5.com/u/Shubham_Mishra)\ **Replies:** 0\ **Last updated:** [October 28, 2026, 9:24pm UTC](https://community.f5.com/t/cve-2022-22965-spring4shell-remote-code-execution-via-data-binding-and-http-layer-mitigation-with-big-ip-advanced-waf/77637 "2026-10-28T21:24:12Z")
Vulnerability Overview CVE-2022-22965 is a critical remote code execution (RCE) vulnerability in VMware’s Spring Framework. A Spring MVC or Spring WebFlux application running on JDK 9 or later may be exploited through th… --- ## [CVE-2026-35616: Critical Improper Access Control in Fortinet FortiClientEMS — Mitigation guidance using F5 Distributed Cloud](https://community.f5.com/t/cve-2026-35616-critical-improper-access-control-in-fortinet-forticlientems-mitigation-guidance-using-f5-distributed-cloud/77636)
**Author:** [@Shubham\_Mishra](https://community.f5.com/u/Shubham_Mishra)\ **Replies:** 0\ **Last updated:** [October 28, 2026, 9:20pm UTC](https://community.f5.com/t/cve-2026-35616-critical-improper-access-control-in-fortinet-forticlientems-mitigation-guidance-using-f5-distributed-cloud/77636 "2026-10-28T21:20:10Z")
Vulnerability Overview CVE-2026-35616 is a critical improper access control vulnerability (CWE-284) in Fortinet FortiClientEMS, the centralized endpoint management server used to deploy and manage FortiClient agents acro… --- ## [The Private Key Was 4: How eMudhra Lost the Internet’s Trust and How to Handle It](https://community.f5.com/t/the-private-key-was-4-how-emudhra-lost-the-internet-s-trust-and-how-to-handle-it/77625)
**Author:** [@Kevin\_Stewart](https://community.f5.com/u/Kevin_Stewart)\ **Replies:** 3\ **Last updated:** [October 30, 2026, 8:30pm UTC](https://community.f5.com/t/the-private-key-was-4-how-emudhra-lost-the-internet-s-trust-and-how-to-handle-it/77625 "2026-10-30T20:30:13Z")
If you’ve been buried in PHP2Shell mitigations recently, you might have overlooked another issue that could be, arguably, worse than Heartbleed. On October 20, 2026, it was reported that the eMudhra Certificate Authority… --- ## [The Signatures You're Afraid To Turn On](https://community.f5.com/t/the-signatures-youre-afraid-to-turn-on/77611)
**Author:** [@Shahnawaz\_BACK1](https://community.f5.com/u/Shahnawaz_BACK1)\ **Replies:** 0\ **Last updated:** [October 27, 2026, 5:23pm UTC](https://community.f5.com/t/the-signatures-youre-afraid-to-turn-on/77611 "2026-10-27T17:23:14Z")
The Coverage Nobody Turns On Every mainstream WAF ships signatures in tiers of confidence. One tier is narrow and specific: it matches a known exploit string and almost never fires on legitimate traffic. The other is bro… --- ## [CVE-2026-109619: PHP Use-After-Free Global State Flaw Enables Remote Code Execution— Mitigation Guidance using F5 Distributed Cloud WAAP](https://community.f5.com/t/cve-2026-109619-php-use-after-free-global-state-flaw-enables-remote-code-execution-mitigation-guidance-using-f5-distributed-cloud-waap/77630)
**Author:** [@Shubham\_Mishra](https://community.f5.com/u/Shubham_Mishra)\ **Replies:** 0\ **Last updated:** [October 27, 2026, 1:27pm UTC](https://community.f5.com/t/cve-2026-109619-php-use-after-free-global-state-flaw-enables-remote-code-execution-mitigation-guidance-using-f5-distributed-cloud-waap/77630 "2026-10-27T13:27:01Z")
Vulnerability Overview CVE-2026-109619 discloses a critical memory-safety defect in the PHP interpreter. PHP maintains various global state structures that temporarily reference request memory. Under certain conditions, … --- ## [CVE-2025-5777: "CitrixBleed 2" Memory Disclosure in NetScaler — Mitigation guidance using BIG-IP Advanced WAF](https://community.f5.com/t/cve-2025-5777-citrixbleed-2-memory-disclosure-in-netscaler-mitigation-guidance-using-big-ip-advanced-waf/77629)
**Author:** [@Shubham\_Mishra](https://community.f5.com/u/Shubham_Mishra)\ **Replies:** 0\ **Last updated:** [October 27, 2026, 1:22pm UTC](https://community.f5.com/t/cve-2025-5777-citrixbleed-2-memory-disclosure-in-netscaler-mitigation-guidance-using-big-ip-advanced-waf/77629 "2026-10-27T13:22:16Z")
Vulnerability Overview CVE-2025-5777 is a high-severity memory overread vulnerability (CWE-125) in Citrix NetScaler Application Delivery Controller and NetScaler Gateway. The flaw stems from insufficient input validation… --- ## [From Local Storage Cluster to Global Content Platform: Accelerating S3 with BIG-IP and F5 Distributed Cloud](https://community.f5.com/t/from-local-storage-cluster-to-global-content-platform-accelerating-s3-with-big-ip-and-f5-distributed-cloud/77578)
**Author:** [@Steve\_Gorman](https://community.f5.com/u/Steve_Gorman)\ **Replies:** 0\ **Last updated:** [October 27, 2026, 1:15pm UTC](https://community.f5.com/t/from-local-storage-cluster-to-global-content-platform-accelerating-s3-with-big-ip-and-f5-distributed-cloud/77578 "2026-10-27T13:15:33Z")
S3 was built to store objects. It was never intended to make every object travel halfway around the world for every single request. Yet that’s exactly what happens in many deployments today when clients are not collocate… --- ## [Per-Tenant Load Balancing for NVIDIA NICo: F5 BIG-IP Next for Kubernetes Inside the BlueField-3 DPU](https://community.f5.com/t/per-tenant-load-balancing-for-nvidia-nico-f5-big-ip-next-for-kubernetes-inside-the-bluefield-3-dpu/77517)
**Author:** [@MarcelWiget](https://community.f5.com/u/MarcelWiget)\ **Replies:** 0\ **Last updated:** [October 26, 2026, 3:00pm UTC](https://community.f5.com/t/per-tenant-load-balancing-for-nvidia-nico-f5-big-ip-next-for-kubernetes-inside-the-bluefield-3-dpu/77517 "2026-10-26T15:00:44Z")
Introduction A GPU cloud sells GPU hours. What it can’t easily sell today is a network service in front of those GPUs that belongs to one tenant: a load balancer with that tenant’s own addresses, its own routing table, a… --- ## [NGINX Ignores RFC 9111 Authorization Rules...Like a Boss!](https://community.f5.com/t/nginx-ignores-rfc-9111-authorization-rules-like-a-boss/77608)
**Author:** [@JRahm](https://community.f5.com/u/JRahm)\ **Replies:** 0\ **Last updated:** [October 22, 2026, 5:36pm UTC](https://community.f5.com/t/nginx-ignores-rfc-9111-authorization-rules-like-a-boss/77608 "2026-10-22T17:36:26Z")
Hey there, Community. I’m on a journey. I’m on Day 10 of my learn-in-public NGINX journey with the goal to complete 14 sprints of 3-4 daily concepts/labs/quizzes in this quarter. My daily brief recaps are on LinkedIn, bu… --- ## [Modernizing App Security for F5 NGINX on Kubernetes with Policy Lifecycle Manager](https://community.f5.com/t/modernizing-app-security-for-f5-nginx-on-kubernetes-with-policy-lifecycle-manager/77542)
**Author:** [@Akash\_Ananthanarayan](https://community.f5.com/u/Akash_Ananthanarayan)\ **Replies:** 0\ **Last updated:** [October 20, 2026, 9:43pm UTC](https://community.f5.com/t/modernizing-app-security-for-f5-nginx-on-kubernetes-with-policy-lifecycle-manager/77542 "2026-10-20T21:43:59Z")
Introduction As modern enterprises accelerate their adoption of GitOps and cloud-native application architectures, Platform, SecOps, and DevOps teams face a critical challenge: securing Kubernetes traffic without slowing… --- ## [ADC Top 10: Hybrid Resiliency with BIG-IP HA, XC WAAP, and GSLB Failover](https://community.f5.com/t/adc-top-10-hybrid-resiliency-with-big-ip-ha-xc-waap-and-gslb-failover/77584)
**Author:** [@Dave\_Potter](https://community.f5.com/u/Dave_Potter)\ **Replies:** 0\ **Last updated:** [October 19, 2026, 11:29pm UTC](https://community.f5.com/t/adc-top-10-hybrid-resiliency-with-big-ip-ha-xc-waap-and-gslb-failover/77584 "2026-10-19T23:29:59Z")
Achieving Ultimate Application Resiliency: A Hybrid F5 Architecture Combining BIG-IP HA and Distributed Cloud WAAP In today’s digital-first world, ensuring constant application availability and robust security is paramou… --- ## [F5 NGINX Plus 37.2 Release Now Available](https://community.f5.com/t/f5-nginx-plus-37-2-release-now-available/77548)
**Author:** [@dylanswartz](https://community.f5.com/u/dylanswartz)\ **Replies:** 0\ **Last updated:** [October 14, 2026, 3:00pm UTC](https://community.f5.com/t/f5-nginx-plus-37-2-release-now-available/77548 "2026-10-14T15:00:19Z")
We are excited to announce the general availability of F5 NGINX Plus Release 37.2. NGINX Plus 37.2 is the latest delivery in our Continuous Release (CR) track, giving enterprise teams access to new capabilities and enha… --- ## [NGINX Kubernetes Releases: F5 NGINX Gateway Fabric 2.8 and Ingress Controller 5.7 Now Available](https://community.f5.com/t/nginx-kubernetes-releases-f5-nginx-gateway-fabric-2-8-and-ingress-controller-5-7-now-available/77561)
**Author:** [@michealkingston](https://community.f5.com/u/michealkingston)\ **Replies:** 0\ **Last updated:** [October 14, 2026, 3:00pm UTC](https://community.f5.com/t/nginx-kubernetes-releases-f5-nginx-gateway-fabric-2-8-and-ingress-controller-5-7-now-available/77561 "2026-10-14T15:00:19Z")
We are excited to announce the latest releases of F5 NGINX Gateway Fabric 2.8 and NGINX Ingress Controller 5.7. These releases deliver practical improvements for Kubernetes routing, including native access policies, ent… --- ## [Speeding Up Defense: AI-Driven Virtual Patching with F5 Distributed Cloud](https://community.f5.com/t/speeding-up-defense-ai-driven-virtual-patching-with-f5-distributed-cloud/77504)
**Author:** [@Valentin\_Tobi](https://community.f5.com/u/Valentin_Tobi)\ **Replies:** 0\ **Last updated:** [October 14, 2026, 12:42pm UTC](https://community.f5.com/t/speeding-up-defense-ai-driven-virtual-patching-with-f5-distributed-cloud/77504 "2026-10-14T12:42:27Z")
Cybersecurity isn’t getting any easier. If you feel like the clock on “Time to Exploit” is ticking louder every year, you’re not wrong. DevOps teams used to have a reasonable window to address vulnerabilities after they … --- ## [How the F5 ADSP Delivers End-to-End Protection for GenAI Workloads](https://community.f5.com/t/how-the-f5-adsp-delivers-end-to-end-protection-for-genai-workloads/77490)
**Author:** [@Akash\_Ananthanarayan](https://community.f5.com/u/Akash_Ananthanarayan)\ **Replies:** 0\ **Last updated:** [October 12, 2026, 12:42pm UTC](https://community.f5.com/t/how-the-f5-adsp-delivers-end-to-end-protection-for-genai-workloads/77490 "2026-10-12T12:42:18Z")
Welcome to our deep dive into the 2024 Application Delivery Top Ten challenges. Today, we’re tackling ADC08: Lack of Security and Regulatory Compliance. In the era of hybrid cloud and AI, legacy security models that only… --- ## [Cloud-init for bootstrapping BIG-IP 21.1+ on F5OS 2.0+](https://community.f5.com/t/cloud-init-for-bootstrapping-big-ip-21-1-on-f5os-2-0/77480)
**Author:** [@SimonKowallik](https://community.f5.com/u/SimonKowallik)\ **Replies:** 2\ **Last updated:** [October 13, 2026, 8:43am UTC](https://community.f5.com/t/cloud-init-for-bootstrapping-big-ip-21-1-on-f5os-2-0/77480 "2026-10-13T08:43:12Z")
If you ever deployed a larger fleet of F5 BIG-IPs on appliances, you probably had an automation job get the tenant ready to even start initial provisioning. Since F5OS 2.0, cloud-init is supported for BIG-IP TMOS tenant… --- ## [Beyond Ingress: How We’re Securing AI Traffic and Bridging BIG-IP with NGINX Gateway Fabric](https://community.f5.com/t/beyond-ingress-how-we-re-securing-ai-traffic-and-bridging-big-ip-with-nginx-gateway-fabric/77467)
**Author:** [@Akash\_Ananthanarayan](https://community.f5.com/u/Akash_Ananthanarayan)\ **Replies:** 2\ **Last updated:** [October 7, 2026, 8:50pm UTC](https://community.f5.com/t/beyond-ingress-how-we-re-securing-ai-traffic-and-bridging-big-ip-with-nginx-gateway-fabric/77467 "2026-10-07T20:50:41Z")
Introduction: As the industry rapidly rallies behind the Kubernetes Gateway API, platform, NetOps, and SecOps teams are facing a new set of immediate architectural challenges. Instead of managing separate routing silos, … --- ## [Unlocking the power of AI with Agent2Agent Protocol (A2A): Key features in F5 BIG-IP v21.1](https://community.f5.com/t/unlocking-the-power-of-ai-with-agent2agent-protocol-a2a-key-features-in-f5-big-ip-v21-1/77451)
**Author:** [@sridharm](https://community.f5.com/u/sridharm)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 8:52pm UTC](https://community.f5.com/t/unlocking-the-power-of-ai-with-agent2agent-protocol-a2a-key-features-in-f5-big-ip-v21-1/77451 "2026-10-06T20:52:10Z")
As AI agents proliferate and collaborate across complex workflows, the challenge of sharing context and coordinating actions between autonomous agents has only grown more acute. The traditional, manual approach to data i… --- ## [Lab walkthrough: Securing S3 Object Storage with BIG-IP Next for Kubernetes](https://community.f5.com/t/lab-walkthrough-securing-s3-object-storage-with-big-ip-next-for-kubernetes/77461)
**Author:** [@momahdy](https://community.f5.com/u/momahdy)\ **Replies:** 0\ **Last updated:** [October 5, 2026, 3:00pm UTC](https://community.f5.com/t/lab-walkthrough-securing-s3-object-storage-with-big-ip-next-for-kubernetes/77461 "2026-10-05T15:00:57Z")
Introduction MinIO gives you an S3-compatible object store that runs anywhere Kubernetes runs. That makes it a common choice for AI training data, model checkpoints, data lakes, backups, container registries, and log a… --- ## [The Next Era of Kubernetes Traffic: Why Gateway API is the Future (and How to Master It with F5 NGINX Gateway Fabric)](https://community.f5.com/t/the-next-era-of-kubernetes-traffic-why-gateway-api-is-the-future-and-how-to-master-it-with-f5-nginx-gateway-fabric/77435)
**Author:** [@fabriziofiorucci](https://community.f5.com/u/fabriziofiorucci)\ **Replies:** 0\ **Last updated:** [October 1, 2026, 7:17pm UTC](https://community.f5.com/t/the-next-era-of-kubernetes-traffic-why-gateway-api-is-the-future-and-how-to-master-it-with-f5-nginx-gateway-fabric/77435 "2026-10-01T19:17:42Z")
The Next Era of Kubernetes Traffic: Why Gateway API is the Future (and How to Master It with NGINX Gateway Fabric) Kubernetes Traffic Management at a Crossroads If you have operated Kubernetes clusters over the past seve… --- ## [Copy that! Duplicate packets with iRules via an iApp](https://community.f5.com/t/copy-that-duplicate-packets-with-irules-via-an-iapp/77500)
**Author:** [@JRahm](https://community.f5.com/u/JRahm)\ **Replies:** 0\ **Last updated:** [September 30, 2026, 4:02pm UTC](https://community.f5.com/t/copy-that-duplicate-packets-with-irules-via-an-iapp/77500 "2026-09-30T16:02:34Z")
No, that’s not a Jack Bauer reference (I’m lying…it totally is,) but rather the crux of the article: copying ingress packets to multiple destinations. This effort was accomplished more than a decade ago in an iApp create… --- ## [Publishing, Controlling, and Securing Kubernetes Apps: A Hands-On Guide to F5 NGINX Ingress Controller](https://community.f5.com/t/publishing-controlling-and-securing-kubernetes-apps-a-hands-on-guide-to-f5-nginx-ingress-controller/77434)
**Author:** [@fabriziofiorucci](https://community.f5.com/u/fabriziofiorucci)\ **Replies:** 1\ **Last updated:** [September 30, 2026, 3:42pm UTC](https://community.f5.com/t/publishing-controlling-and-securing-kubernetes-apps-a-hands-on-guide-to-f5-nginx-ingress-controller/77434 "2026-09-30T15:42:09Z")
The Edge Challenge in Kubernetes Kubernetes has firmly established itself as the de facto operating system for modern cloud-native workloads. Microservices architectures allow application teams to build, scale, and itera… --- ## [Delineating Between Different Automated Traffic Types with F5 Distributed Cloud Bot Defense](https://community.f5.com/t/delineating-between-different-automated-traffic-types-with-f5-distributed-cloud-bot-defense/77407)
**Author:** [@jus](https://community.f5.com/u/jus)\ **Replies:** 0\ **Last updated:** [September 29, 2026, 6:31pm UTC](https://community.f5.com/t/delineating-between-different-automated-traffic-types-with-f5-distributed-cloud-bot-defense/77407 "2026-09-29T18:31:02Z")
For years, bot management was largely a binary decision: Allow Human Traffic or Block Malicious Automated Scripts. However, today’s digital landscape has expanded far beyond this simple distinction. The rise of Agentic … --- ## [Deploying F5 AI Guardrails with NVIDIA NeMo: Securing Enterprise GenAI at Scale](https://community.f5.com/t/deploying-f5-ai-guardrails-with-nvidia-nemo-securing-enterprise-genai-at-scale/77375)
**Author:** [@Ryan\_Korock](https://community.f5.com/u/Ryan_Korock)\ **Replies:** 0\ **Last updated:** [September 29, 2026, 12:22pm UTC](https://community.f5.com/t/deploying-f5-ai-guardrails-with-nvidia-nemo-securing-enterprise-genai-at-scale/77375 "2026-09-29T12:22:13Z")
As enterprise Generative AI transitions from experimental sandboxes to production pipelines, securing LLM inference workflows introduces two new critical infrastructure challenges: 1. Expanding Attack Surface at the Inf… --- ## [F5 & Omnissa - Updated Deployment Guide and iAPP](https://community.f5.com/t/f5-omnissa-updated-deployment-guide-and-iapp/77445)
**Author:** [@Matt\_Mabis](https://community.f5.com/u/Matt_Mabis)\ **Replies:** 0\ **Last updated:** [September 25, 2026, 12:00pm UTC](https://community.f5.com/t/f5-omnissa-updated-deployment-guide-and-iapp/77445 "2026-09-25T12:00:15Z")
With Omnissa ONE right around the corner, we have some exciting news to share. We have published an updated Omnissa Horizon iApp and accompanying Deployment Guide to help simplify and standardize Omnissa Horizon and Omn… --- ## [Trust, But Verify: Adding Deep Malware Inspection to NetApp S3 Flows with F5 and OPSWAT](https://community.f5.com/t/trust-but-verify-adding-deep-malware-inspection-to-netapp-s3-flows-with-f5-and-opswat/77425)
**Author:** [@Steve\_Gorman](https://community.f5.com/u/Steve_Gorman)\ **Replies:** 0\ **Last updated:** [September 24, 2026, 12:00pm UTC](https://community.f5.com/t/trust-but-verify-adding-deep-malware-inspection-to-netapp-s3-flows-with-f5-and-opswat/77425 "2026-09-24T12:00:25Z")
Object storage has become the digital attic of the modern enterprise. Everything seems to end up there: AI training datasets, backups, application data, media files, compliance archives, and occasionally that one mysteri… --- ## [Unovis 1.7.0: AI-Powered Chart Generation, Server-Side Rendering, and New Chart Components](https://community.f5.com/t/unovis-1-7-0-ai-powered-chart-generation-server-side-rendering-and-new-chart-components/77405)
**Author:** [@qian](https://community.f5.com/u/qian)\ **Replies:** 0\ **Last updated:** [September 21, 2026, 12:00pm UTC](https://community.f5.com/t/unovis-1-7-0-ai-powered-chart-generation-server-side-rendering-and-new-chart-components/77405 "2026-09-21T12:00:01Z")
We’re excited to announce Unovis 1.7.0, our largest release to date. This release introduces new capabilities for developers building AI-powered applications, server-rendered experiences, and secure production environme… --- ## [PKI Today 2026: Revocation Is Still Broken. We've Decided to Be Calm About It](https://community.f5.com/t/pki-today-2026-revocation-is-still-broken-weve-decided-to-be-calm-about-it/77309)
**Author:** [@Chase\_Abbott](https://community.f5.com/u/Chase_Abbott)\ **Replies:** 0\ **Last updated:** [September 16, 2026, 12:00pm UTC](https://community.f5.com/t/pki-today-2026-revocation-is-still-broken-weve-decided-to-be-calm-about-it/77309 "2026-09-16T12:00:17Z")
Post-quantum signatures don’t fail because they’re insecure. They fail because they’re enormous, and the entire web PKI was quietly built on the assumption that signatures are small. Pull that assumption out and a surpri… [Next page](https://community.f5.com/c/articles/technical-articles/21.md?page=1)