For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Stop Using the Base TCP Profile!

[Update 1 Mar 2017: F5 has new built-in profiles in TMOS v13.0. Although the default profile settings still haven't changed, there is good news on that from as well.] If the customer data ...
Published Oct 14, 2015
Version 1.0
application delivery
BIG-IP
LTM
performance
series-the-tcp-profile
tcp
Martin_Duke's avatar
Ret. Employee
I work in the Office of the CTO on both F5's standards engagement process in general, and specifically on the application of transport-layer innovation to F5's product line. F5 sponsors my service as Transport Area Director at the Internet Engineering Task Force (IETF), where I help to administer standards development worldwide.
View Profile
Martin_Duke's avatar
Ret. Employee
I work in the Office of the CTO on both F5's standards engagement process in general, and specifically on the application of transport-layer innovation to F5's product line. F5 sponsors my service as Transport Area Director at the Internet Engineering Task Force (IETF), where I help to administer standards development worldwide.
View Profile
Martin_Duke's avatar
Martin_Duke
Ret. Employee
Jul 07, 2016
Do the recommendations in 'What you should do instead?' apply for SWG/Forward Proxy deployments as well? SWG deployments will usually have a http profile attached.

I don't see a reason that those deployments would have dramatically different path dynamics. However, TCP profiles are most important when BIG-IP is sending data over the open internet -- and in a forward proxy, in general you are receiving it. So it's not that the recommended profiles don't apply, it's that they matter less.