F5-303 flashcards
F5-303 · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Virtual server
- A BIG-IP object that listens on an IP address and port, terminates client connections, and forwards traffic to a pool using a load-balancing method and attached profiles.
- Pool member
- A backend server defined by IP address and port inside a pool; its health is determined by an attached monitor, and traffic is sent only to members marked up.
- Full proxy mode
- The default virtual server type where BIG-IP maintains separate client-side and server-side TCP connections, enabling layer 7 inspection, iRules, and payload modification.
- Least connections
- A load-balancing method that selects the pool member with the fewest active connections, useful when server capacity is similar and session durations vary.
- Persistence profile
- A profile that keeps a client's requests on the same pool member for a timeout period, using source address, cookie, SSL session ID, or destination address as the key.
- Health monitor
- A check that probes pool members at a configured interval and marks them up or down based on success; a member is used only while its monitor is successful.
- OneConnect
- A profile that pools and reuses server-side TCP connections across multiple client requests, reducing server connection overhead and changing server-side connection counts.
- TMM
- The Traffic Management Microkernel, the data-plane process that processes packets and applies virtual server, pool, profile, and iRule logic; it is separate from the control plane.
- SNAT
- Source NAT translates client source addresses to a self IP or SNAT pool address before reaching pool members, affecting return routing and server-side source logging.
- iRule event order
- iRules fire on events in sequence, such as CLIENT_ACCEPTED, HTTP_REQUEST, LB_SELECTED, and HTTP_RESPONSE; commands in each event can select pools, persist, or modify payloads.
- Local traffic policy
- A GUI-managed ordered set of conditions and actions attached to a virtual server that can replace iRule logic for routing, redirect, and header manipulation.
- Wildcard virtual server
- A virtual server whose destination matches any address not matched by a more specific virtual server, often used as a default listener for a network range.
- ConfigSync
- The process that synchronizes configuration objects across devices in an HA device group; changes are not active on the peer until synchronization completes.
- Floating self IP
- A self IP address shared by HA peers that moves to the active device during failover, allowing clients and servers to reach the active unit consistently.
- AS3 declaration
- A JSON document posted to /mgmt/shared/appsvcs/declare that declaratively defines tenants, applications, services, and pools; reapplying converges configuration idempotently.
- Profile inheritance
- Profiles can have a parent profile; child profiles inherit settings and override only specified values, so changes to the parent propagate unless overridden.
- WAF enforcement mode
- A security policy setting that determines whether violations are logged only (transparent) or actively blocked (enforcing), with alarms configured per violation type.
- Security policy staging
- A learning phase where the WAF observes traffic and suggests signatures, URLs, parameters, and cookies; suggestions are reviewed before the policy is enforced.
- Positive security model
- A WAF approach that defines allowed URLs, parameters, cookies, and file types; requests that fall outside the defined model are treated as violations.
- Attack signature
- A pattern that matches known attack traffic, such as SQL injection or cross-site scripting; signatures have accuracy and risk attributes and can be staged before enforcement.
- Support ID
- A unique identifier returned to the client when a WAF violation occurs, used to find the corresponding detailed log entry for troubleshooting.
- Bot defense
- A module that classifies clients as browser, mobile app, or scripted and can challenge, rate-limit, or block automated traffic based on behavior and signatures.
- DoS profile
- A configuration that sets thresholds and rate limits for traffic types and endpoints, detecting and mitigating denial-of-service patterns before they exhaust resources.
- iControl REST token
- An authentication token obtained from POST /mgmt/shared/authn/login and sent in the X-F5-Auth-Token header for subsequent API calls instead of basic credentials.
- REST object path
- An iControl REST URL such as /mgmt/tm/ltm/pool/~Common~webpool/members, where the tilde separates folder and object names in the path.
- Declarative Onboarding
- A REST API at /mgmt/shared/declarative-onboarding that configures base system settings such as hostname, network, DNS, NTP, and licensing from a JSON document.
- Telemetry Streaming
- A declarative API that collects and forwards metrics and logs from BIG-IP to consumers such as analytics platforms, using a JSON configuration.
- iControl LX worker
- A custom REST extension deployed as an RPM that exposes endpoints under /mgmt/shared/<worker>, allowing integration with external systems.
- tmsh
- The Traffic Management Shell, a command-line interface for configuring and inspecting BIG-IP objects; 'tmsh list' reads and 'tmsh save sys config' persists.
- qkview
- A diagnostic collection command that gathers logs, configuration, and system state into a file for support analysis; it is commonly requested for troubleshooting cases.
- tcpdump on BIG-IP
- A packet capture command run on a TMM or management interface, for example tcpdump -i 0.0:nnn host <ip>, used to verify traffic flows and handshakes.
- Monitor detection time
- The approximate time to detect a failed pool member, calculated as monitor interval multiplied by retries plus one, plus the monitor timeout.