For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nik's avatar
Nik
Icon for Cirrus rankCirrus
Jun 14, 2010

access restriction - pf vs irule?

we'll be making the transition from a pair of 6800s to a new viprion chassis in a few weeks. the current pair pushes about 900mb/s externally with 5k new connections per second. about a year ago wit...
config
design
Nom_55811's avatar
Nom_55811
Icon for Nimbostratus rankNimbostratus
Jun 21, 2010
We're having some performance issue with packet filters too. Our current understanding is that packet filters are constrained to 20% of the available CPU power in the box, so you're somewhat likely to encounter issues when using it with any kind of substantial throughput.

 

 

We are currently looking at using pass-through firewalls in between the F5's and our L3 switches so we can provide security completely outside of the F5 itself.