Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

OpenShift Service Mesh 2.x/3.x with F5 BIG-IP

  Overview OpenShift Service Mesh (OSSM) is Red Hat´s packaged version of Istio Service Mesh. Istio has the Ingress Gateway component to handle incoming traffic from outside of the cluster. Like ...
Published Oct 06, 2025
Version 1.0
application delivery
cloud
devops
Ulises_Alonso's avatar
Icon for Employee rankEmployee
Solutions architect in Business Development with focus in automation and integration with partner's technologies. Prior to this role I was consultant in Professional Services and escalations engineer in Technical Support. Outside F5, I worked in mobile and wired network operators as network engineer. I started my career in academic research. In all these years, no matter what I've been doing Linux has been always the best tool. Not the one in the picture :-)
View Profile
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Nov 12, 2025

Nice article! 

Just as a note I was thinking of combining "--pool-member-type=auto" and "externalTrafficPolicy: Local". This way there could be services of type Cluster and type Nodeport as maybe if the CIS API communication overutilizes F5 BIG-IP some apps can be exposed with NodePort service and  health monitors to select the correct nodes that have the app pods.

  • Ulises_Alonso's avatar
    Ulises_Alonso
    Icon for Employee rankEmployee
    Nov 14, 2025

    Looks good to me!