New in Version 30.5.2.0
Static NAT for Inbound and Outbound Link Load Balancing
The Smart NAT feature provides one centralized pane to configure all required NAT translations. You can add, edit, and delete entries in one location, which simplifies the process of NAT translation configuration.
The following types of NAT translations are supported:
Static NAT — Ensures delivery of specific traffic to a particular server on the internal network. For example, LinkProof uses Static NAT, meaning predefined addresses are mapped to a single internal host to load balance traffic to the host among multiple transparent traffic connections. This ensures that the return traffic uses the same path and also allows traffic to that single host to use multiple ISPs transparently. You assign multiple Static Smart NAT addresses to the internal server, typically one for each ISP address range.
Dynamic NAT — Enables LinkProof to hide various network elements located behind LinkProof. Using this feature, LinkProof replaces the original source IP address and source port of a packet that is with the configured NAT IP address and a dynamically allocated port before forwarding the request to the group. The network elements whose addresses are translated can be servers or other local hosts. You can set different NAT addresses for different ranges of intercepted addresses.
For example, traffic from subnet A is translated using IP address 10.1.1.1, and traffic from subnet B is translated using IP address 10.1.1.3.
No Nat — Enables a simple configuration where internal hosts have IP addresses that belong to a range of one of the group servers.
Traffic to and from these hosts should not be translated if the traffic is forwarded to this group server
NFR ID: prod00240838
Geolocation-based Load Balancing
In this version, Alteon now enables making load balancing decisions based on the geographical location of the traffic source or destination. For this purpose, Alteon has integrated the MaxMind GeoLite2 City geolocation database.
To define a geolocation, you must configure a network class of the new type Region. The Region network class lets you define a location down to the State level (Continent, Country, and State).
This feature includes the following capabilities:

Select a data center based on the geographical location of the client (GSLB). The selection is made via the DNS Rule Network metric:

The DNS Network metric now lets you define the network using the legacy range or a Network Class (either the
IP or
Region type).

In addition, the selection can be made based on the geographical location of the DNS client (LDNS) or on the geographical location of the actual client, if its IP address is present in the DNS request (EDNS0 extension).

Select a link based on the geographical location (LinkProof):

For inbound traffic, the selection is made based on the geographical location of the client. The selection is made via a DNS Rule Network metric (the same as for GSLB).

For outbound traffic, the selection is made based on the geographical location of the destination

Provide different services based on the user’s geographical location. For example:

Traffic from French customers should go to group of servers that have French content.

Response traffic to a customer from Afghanistan should be compressed due to high latency.

Block traffic from/to certain countries.

Enforce different bandwidth/rate limits per geolocation.
Geolocation Database Update
MaxMind updates the GeoLite2 databases on the first Tuesday of every month. The database can be downloaded for free from MaxMind and uploaded to Alteon.
You can also buy the GeoIP2 City database from MaxMind and upload it to Alteon.
MaxMind provides both binary and CSV formats, both as zip files. To upgrade the geolocation database in Alteon, download both files from MaxMind and consolidate them in a zip file.
NFR ID: prod00236644
AppShape++ Enhancements
The rdwr-cookie command retrieves data related to a cookie configured for persistency on the current HTTP/S virtual service (Persistency Mode = Cookie/pbind cookie).
rdwr-cookie name – Retrieves the name configured for the cookie.
rdwr-cookie site-ip <value> – Retrieves the site IP identifier from the value of the persistency cookie inserted by Alteon (relevant only for cookie insert persistency mode).
NFR ID: prod00238551
Long Object ID Support
The ID field length for real servers, server groups and virtual servers has been extended to 255 characters to support the FQDN naming convention with dot.
Notes:

Quick Application Setup do not work with this extended ID length and currently work only with a maximum ID length of 32 characters.

The DPM dashboard only displays short IDs that are not longer than 50 characters.

APM can be enabled on a service where its virtual service ID

does not include a period (‘.‘)

contains up to 245 characters

SNMP supports an OID of a maximum 128 digit length, including the parameter OID and the key. Alteon implements a special mechanism that lets you browse the table (GetNext), Get a specific object, or change (Set) a specific parameter.

However, you cannot create a new object with a long ID via SNMP.

When configured long IDs, some audit log messages might be displayed distorted
NFR ID: prod00236421
Intermediate SSL Certificate for WBM Connection
In this version, you can define an intermediate CA certificate/group for Alteon WBM. With this support, when accessing WBM, Alteon sends both its server certificate and the configured intermediate CA certificate/group.
This facilitates the process of verifying the chain of trust (instead of installing the chained CA at the client browsers).
The configuration is available in the following paths:

From WBM ─
Configuration perspective > system > Management access > Management protocol > HTTPS 
From CLI─
/cfg/sys/access/https
Note: In a virtualization environment on a VX WBM, setting intermediate certificate for management connection is not available. Workaround is to use the CLI for this setting. (DE18454)
NFR ID: prod00234972
Support for RFC6223 and/or RFC5626
The Alteon SIP parser now allows keep alive messages to pass from the client to the server, and vice versa, without blocking or discarding the messages.
NFR ID: prod00244065
HTTPS Health Check with Client Certificate
With this version, Alteon can now identify itself using a client certificate during HTTPS health checks when required by the monitored server. To enable this capability, select a certificate from the certificate repository as the health monitoring client certificate:

From WBM ─
Application Delivery > Server Resources > Health Checks.

From CLI ─
cfg/slb/advh/certNFR ID: prod00243819
GSLB Enhancements
Prevent Negative DNS Response Caching
In previous versions, when there was no site available, Alteon would answer Server failure. Many DNS clients would cache this answer and would not retry resolution. As of this version, to prevent this, Alteon no longer answers if there is no site available. This results in the client to continue retrying to resolve the DNS record until the site becomes available.
NFR ID: prod00240111
New GSLB Metric
A new GSLB metric called Current Least Connections lets you select a site (or WAN link) according to the lowest absolute number of connections active on that site/WAN link. The regular Least Connections metric selects the site/WAN Link with the lowest session utilization. Session utilization is the percentage of sessions used over the total allowed (maximum) sessions.
NFR ID: prod00245937