devops
21638 TopicsChanges to DO and AS3 GitHub - no longer monitored
I see Changes to DO and AS3 GitHub pages have been updated with these notices: " AS OF FEBRUARY 2026, THIS GITHUB REPOSITORY WILL NO LONGER BE MONITORED OR UPDATED. This repository will remain available, at least temporarily. You can find the latest RPMs and other files on MyF5 Downloads. Refer to 'Filing Issues and Getting Help' for additional details. " I'm also seeing [Deprecated] notices on some VS Code extensions, which may or may not be related. I haven't been able to find any larger announcements regarding these. I have not been able to find any additional detail. Does anyone know if we are about to see a a large shift (or loss) of tooling around BIG-IP?767Views6likes17CommentsErrors with AS3 3.56.0 with F5 17.5.1.6
Hi Folks, I upgraded my Lab F5s to 17.5.1.6 and now my AS3 declarations are not working anymore. I get following error regardless of the declaration, even an empty declaration throws this error. "results": [ { "message": "failure querying config for tenant jwt-keys (POST http://admin:XXXXXX@localhost:8100/mgmt/tm/util/bash execute bash command response=403 body={\"code\":403,\"message\":\"Direct access to /mgmt/tm/util/ is not permitted.\",\"restOperationId\":18430866,\"kind\":\":resterrorresponse\"})", "host": "localhost", "tenant": "jwt-keys", "code": 400, "declarationId": "tenant_name" } ], Has anyone experienced the same error? The error does not change if I change the authentication method from basic to token. I will open a case with F5 and report the result back. I found following error in the restjavad.0.log [WARNING][787][04 May 2026 11:59:45 CEST][8100/mgmt ForwarderPassThroughWorker] Blocked direct localhost request to util endpoint: /mgmt/tm/util/bashSolved1.3KViews7likes27CommentsNeed BIG-IP VE Lab License for Personal Study/Learning
Hi F5 Community, I am setting up a personal home lab to learn. F5 BIG-IP for certification preparation. I have deployed BIG-IP VE but need a lab license. to access the management GUI. Could anyone help me get a free lab/evaluation? license for personal learning purposes? Thank you.69Views0likes1CommentCPU load when Prometheus is scraping metrics from F5 BIG-IP LTM
We are experiencing an issue where Prometheus is scraping metrics from F5 BIG-IP LTM, causing high CPU and memory utilization on the F5 device. Initial step, we have adjusted the scraping interval to 1 minute, but the issue still. Are there any recommended tuning options or best practices?295Views0likes5CommentsCLI Tool for BIG-IP - f5 cli
I'm releasing a CLI tool for inspecting and manipulating configuration. It’s a whole suite of tools in one, from `f5 grep` through to the advanced jq-style `f5 query` This tool is based on my last 20 years of using and abusing BIG-IP, and the ideas behind all the tooling I built along the way. https://github.com/bitwisecook/tcl-lsp/blob/main/INSTALL-cli.md https://github.com/bitwisecook/tcl-lsp/tree/main/docs/references/f5_query https://github.com/bitwisecook/tcl-lsp/tree/main/samples/for_f5_query there’s lots of documentation, worked examples, KCS style docs covering it, contending help including shell completion support. It requires Python 3.10+ for now. feel free to discuss here or raise issues on GitHub. This is part of my much larger work on an LSP, MCP, and AI tooling for all editors and harnesses to improve f5 tooling. The `query` verb can do stuff like $ f5 query --name ltm=ltm.conf --name gtm=gtm.conf --merge --raw ' $gtm.gtm.wideip[] as $w | $w.pools[] as $gp | $gp.members[] | last(split(., ":")) as $vspath | $ltm.ltm.virtual[] | select(."full-path" == $vspath) as $vs | $vs.pool.members[] | tsv($w.name, $gp.name, $vs.name, $vs.pool, .address, port(.name)) ' ltm.conf gtm.conf | sort -u api.example.com api_app_pool api_vs /Common/api_pool 10.0.2.20 8443 api.example.com api_app_pool api_vs /Common/api_pool 10.0.2.21 8443 www.example.com example_app_pool web_vs /Common/web_pool 10.0.1.10 80 www.example.com example_app_pool web_vs /Common/web_pool 10.0.1.11 80108Views1like0CommentsF5 Config - API Access on servers
Hello,, Pl. be gentle as I am new to this and am asking this on behalf of someone as their networking resource is ooo on some emergency. There are two separate, identical server instances hosting identical API's e.g. here is a sample endpoint for one of those API's https://prod1.mydomain.com:8443/ne/curr/CheckInventory https://prod2.mydomain.com:8443/ne/curr/CheckInventory F5 has been configured Round-Robin mode Both Servers added to a new Pool VIP created with ssl enabled (default port 443) https://app.mydomain.com Questions: What additional config neeeds to happen so any request from an external client for CheckInventory endpoint is processed What will be the new endpoint for this API? https://app.mydomain.com/CheckInventory Can it be changed to something else Is there an API mapping that has to be created withing the F5 config that will translate the Request ( https://app.mydomain.com/CheckInventory) to what the server is expecting (https://prod1 (or prod2).mydomain.com:8443/ne/curr/CheckInventory) Thank you128Views0likes1CommentF5 Visual Studio Code extension not listing Big IP device partitions for 17.5.1.5 QKViews
As a general practice, after I upload qkviews to iHealth I then copy them to my visual studio code workspace. In the past, pulling them up using the Big IP extension, it would show all the source conf files and partions. For all 17.5.1.5 qkviews I've generated this past weekend, none of them have the source/partition data. Is this a bug, did F5 change something in the way this new build processes qkviews? The extension is pretty much worthless without it. To be sure it's limited to 17.5, I pulled up several 17.1.3.1 QKViews and the partitions/sources loaded fine.121Views0likes1CommentManaging iRules configuration
Hi everyone, I was searching on documentation on using Github to deploy iRules as it feels inpractical to manually configured iRules 1 by 1 if you had lets say 35 of them. I noticed an article in 2016 however I have not seen much more details on this? Is this something that has been done by many of you with different tools other than GitHub? Any information would be very helpful. Have a good one,Solved269Views0likes5CommentsASM/AWAF declarative policy
Hi there, I searching for options to automate ASM and rather want to avoid having AS3 in loop due to need to update it on F5 side. Luckily F5 introduced "declarative policy" But, I am not able to get it working properly. I am able to deploy WAF policy with example mentioned here. But it does not contain any of specified servier technologies. I do have the same issue with parameters or URLs when I tried other examples. They are simply got ignored. Is it buggy, or have anyone of you struggled with it? My last option is to have set of policies predefined in XML format and do some importing or playing with policy inheritance. Well declarative ASM looks exactly what I need, it just does not work or I am wrong :) Thanks for any help Zdenek239Views0likes5Comments