Forum Discussion
anson
Nimbostratus
Sep 17, 2019script to find difference between scf file
Hi, Is there a option in f5 to trigger an alert based on scf difference . We recently had an issue with our f5 and the suggestion was to post a query with devcentral to track difference in scf file ...
The_Bhattman
Nimbostratus
Apr 08, 2008Hi Steve,
This is one of those areas where certain camps will say yes it's secure enough and other camps will say "not really". As a former government IT employee, I wouldn't put F5 LTMs on multiple DMZs, simply becasue they are not designed to be firewalls and were designed to bring networks together ala load balancing.
Those are my 2 cents and I am sure others will come in with thiers. So I wecome anyone into this discussion.
While I'm also not sure about the hardware, I did find this about the feature:
K15609: Overview of TCP Segmentation Offload and Large Receive Offload
In addition, this is about VE and about 2/3 of the way down is the TSO info: https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-ve-setup-vmware-esxi-11-6-0/1.html
About TCP Segmentation Offloading support
If you want to disable support for TCP Segmentation Offloading (TSO), you must submit a tmsh command, because the TSO feature is enabled by default. Note that enabling TSO support also enables support for large receive offload (LRO) and Jumbo Frames.
Configuring a hypervisor for TSO support
You must have the Admin user role to enable or disable TSO support for a hypervisor.
Using the tmsh command sys db, you can turn TSO support on, off, or check to see whether support is currently enabled.- To determine whether TSO support is currently enabled, use the tmsh show command.
show sys db tm.tcpsegmentationoffload
- To enable support for TSO, use the tmsh enable command.
sys db tm.tcpsegmentationoffload enable
- To disable support for TSO, use the tmsh disable command.
sys db tm.tcpsegmentationoffload disable
- To determine whether TSO support is currently enabled, use the tmsh show command.