F5Networks / f5-appsvcs-extension

F5 BIG-IP Application Services 3 Extension
Apache License 2.0
169 stars 54 forks source link

AFM DOS device network dns and sip vectors #784

Open miranda31 opened 11 months ago

miranda31 commented 11 months ago

Is your feature request related to a problem? Please describe.

DOS profiles are included in AS3 to protect the service and this works well. The API lacks the ability to deploy a global DOS protection policy at BIGIP level. It would be interesting to be able to do this as there are 79 network vectors, 18 DNS vectors and 14 SIP vectors.

Describe the solution you'd like

Add the DOS device network DNS and SIP vectors as well as the dynamic signatures and the whitelisting.

Describe alternatives you've considered

Ansible with imperative collection contains the bigip_firewall_dos_vector. Could be an alternative.

sunitharonan commented 9 months ago

Thanks for reaching out, have created an internal backlog item AUTOTOOL-4267. In order to prioritize this issue, please reach out to us at automation_toolchain_pm@f5.com