# Tips & Configurations

**URL:** https://community.a10networks.com/c/tips-configurations/10.md

[Latest](https://community.a10networks.com/latest.md) · [Categories](https://community.a10networks.com/categories.md) · [Tags](https://community.a10networks.com/tags.md)

---

## [\[T&C\] Getting started with Thunder ADC configuration using Terraform](https://community.a10networks.com/t/t-c-getting-started-with-thunder-adc-configuration-using-terraform/713)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 1\
**Last updated:** [October 30, 2025, 5:33am UTC](https://community.a10networks.com/t/t-c-getting-started-with-thunder-adc-configuration-using-terraform/713 "2025-10-30T05:33:34Z")

</div>

In this article, we will see how you can use the Infrastructure as Code (IaC) tool Terraform to configure the Thunder ADC. The current configuration of the Thunder ADC is as follows: vThunder#sh runn !64-bit Advanced …

---

## [\[T&C\] Thunder ADC with Thunder Kubernetes Connector (TKC) using CRDs](https://community.a10networks.com/t/t-c-thunder-adc-with-thunder-kubernetes-connector-tkc-using-crds/742)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [August 12, 2022, 7:38pm UTC](https://community.a10networks.com/t/t-c-thunder-adc-with-thunder-kubernetes-connector-tkc-using-crds/742 "2022-08-12T19:38:06Z")

</div>

In an earlier article, we saw how you can use the Thunder Kubernetes Connector (TKC) to dynamically configure the Thunder ADC for load-balancing traffic to a Kubernetes cluster. In that article, we specified the SLB conf…

---

## [\[T&C\] Load balancing Kubernetes traffic with Thunder ADC and TKC using IPIP Tunnels](https://community.a10networks.com/t/t-c-load-balancing-kubernetes-traffic-with-thunder-adc-and-tkc-using-ipip-tunnels/752)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [October 25, 2022, 7:34pm UTC](https://community.a10networks.com/t/t-c-load-balancing-kubernetes-traffic-with-thunder-adc-and-tkc-using-ipip-tunnels/752 "2022-10-25T19:34:00Z")

</div>

In an earlier article, we saw how you can use the Thunder Kubernetes Connector (TKC) to dynamically configure the Thunder ADC for load-balancing traffic to a Kubernetes cluster. In that article, the Thunder device load-b…

---

## [\[T&C\] Deploy NAT64 and DNS64 with Thunder CGN/CFW](https://community.a10networks.com/t/t-c-deploy-nat64-and-dns64-with-thunder-cgn-cfw/723)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [May 13, 2022, 11:03pm UTC](https://community.a10networks.com/t/t-c-deploy-nat64-and-dns64-with-thunder-cgn-cfw/723 "2022-05-13T23:03:05Z")

</div>

In this article, we will see how you can deploy NAT64 with DNS64 using Thunder CGN/CFW to enable IPv6 clients to access IPv4 resources. Setup Here is an overview of the setup and the overall functionality (DNS64 and NAT…

---

## [\[T&C\] Use Postman for A10 aXAPI calls](https://community.a10networks.com/t/t-c-use-postman-for-a10-axapi-calls/720)

<div class="topic-metadata">

**Author:** [@tmitsuhata](https://community.a10networks.com/u/tmitsuhata)\
**Replies:** 0\
**Last updated:** [May 5, 2022, 8:53pm UTC](https://community.a10networks.com/t/t-c-use-postman-for-a10-axapi-calls/720 "2022-05-05T20:53:28Z")

</div>

Postman is well known test tool and very convenient when it comes to executing APIs. It provides not only variety of API functionality including authentication, setting headers, customizing the payload, but also collabor…

---

## [Heads-up! Forum Migration and Maintenance](https://community.a10networks.com/t/heads-up-forum-migration-and-maintenance/900)

<div class="topic-metadata">

**Author:** [@a10tme](https://community.a10networks.com/u/a10tme)\
**Replies:** 0\
**Last updated:** [June 9, 2025, 4:59pm UTC](https://community.a10networks.com/t/heads-up-forum-migration-and-maintenance/900 "2025-06-09T16:59:41Z")

</div>

Hi A10 Community members, We’re excited to announce that our community forum will be undergoing a significant upgrade and migration to a new platform. We’ll be migrating to a powerful new platform that will offer a mo…

---

## [\[T&C\] CGNAT Port Reservation (Port Forwarding) with Firewall using Thunder CGN/CFW](https://community.a10networks.com/t/t-c-cgnat-port-reservation-port-forwarding-with-firewall-using-thunder-cgn-cfw/817)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [November 17, 2023, 11:51pm UTC](https://community.a10networks.com/t/t-c-cgnat-port-reservation-port-forwarding-with-firewall-using-thunder-cgn-cfw/817 "2023-11-17T23:51:10Z")

</div>

In this article we will see how you can implement CGNAT Static Port Reservation (also known as Port Forwarding) using A10 Thunder CGN/CFW. Deployment Scenario Here is the deployment scenario: We have two internal serv…

---

## [HTTP/2 Rapid Reset Vulnerability (CVE-2023-44487) Attack Advisory](https://community.a10networks.com/t/http-2-rapid-reset-vulnerability-cve-2023-44487-attack-advisory/814)

<div class="topic-metadata">

**Author:** [@cbethencourt](https://community.a10networks.com/u/cbethencourt)\
**Replies:** 0\
**Last updated:** [October 20, 2023, 9:49pm UTC](https://community.a10networks.com/t/http-2-rapid-reset-vulnerability-cve-2023-44487-attack-advisory/814 "2023-10-20T21:49:53Z")

</div>

An emerging threat, the HTTP/2 Rapid Reset Vulnerability (CVE-2023-44487), has been identified as a new application layer denial-of-service attack that brings a significant risk to network security. This vulnerability al…

---

## [\[T&C\] Deploy DNS recursive resolver using Thunder CFW](https://community.a10networks.com/t/t-c-deploy-dns-recursive-resolver-using-thunder-cfw/769)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [March 22, 2023, 11:01pm UTC](https://community.a10networks.com/t/t-c-deploy-dns-recursive-resolver-using-thunder-cfw/769 "2023-03-22T23:01:12Z")

</div>

In this article, we will see you can deploy DNS recursive resolver using Thunder CFW. Setup This is what we want to achieve: By default, the Thunder device should resolve queries starting from the root servers. Howe…

---

## [\[T&C\] DNS over HTTPS (DoH) with certificate from Let's Encrypt](https://community.a10networks.com/t/t-c-dns-over-https-doh-with-certificate-from-lets-encrypt/762)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [February 4, 2023, 12:46am UTC](https://community.a10networks.com/t/t-c-dns-over-https-doh-with-certificate-from-lets-encrypt/762 "2023-02-04T00:46:33Z")

</div>

DNS over HTTPS (DoH) is a protocol for securing DNS communication by sending DNS queries and getting DNS responses over HTTPS. For details, refer to RFC 8484 (https://tools.ietf.org/html/rfc8484)..) This article shows …

---

## [How to set up Harmony Controller ?](https://community.a10networks.com/t/how-to-set-up-harmony-controller/718)

<div class="topic-metadata">

**Author:** [@gokulpokuri](https://community.a10networks.com/u/gokulpokuri)\
**Replies:** 0\
**Last updated:** [April 21, 2022, 7:30pm UTC](https://community.a10networks.com/t/how-to-set-up-harmony-controller/718 "2022-04-21T19:30:31Z")

</div>

In this article, we will look at how to set up Harmony Controller after activating Controller and Thunder licenses. The next steps are to: 1. Check Networking Pre-requisites 2. On-board Thunder to Harmony Controller 3…

---

## [How to get started with vThunder Free trial ?](https://community.a10networks.com/t/how-to-get-started-with-vthunder-free-trial/716)

<div class="topic-metadata">

**Author:** [@gokulpokuri](https://community.a10networks.com/u/gokulpokuri)\
**Replies:** 0\
**Last updated:** [April 18, 2022, 7:07pm UTC](https://community.a10networks.com/t/how-to-get-started-with-vthunder-free-trial/716 "2022-04-18T19:07:45Z")

</div>

In this article, we will look into how you can sign-up & quickly set up your vThunder free trial in 30 minutes. This trial allows you to explore and test the benefits of A10 application service capabilities Convergent Fi…

---

## [Get started with Harmony Controller Trial](https://community.a10networks.com/t/get-started-with-harmony-controller-trial/714)

<div class="topic-metadata">

**Author:** [@gokulpokuri](https://community.a10networks.com/u/gokulpokuri)\
**Replies:** 0\
**Last updated:** [April 14, 2022, 10:30pm UTC](https://community.a10networks.com/t/get-started-with-harmony-controller-trial/714 "2022-04-14T22:30:49Z")

</div>

Harmony Controller offers single-pane-of-glass management and analytics for A10 secure application services, including A10 Thunder® ADC, SSLi®, CFW, and CGN across on-premises data centers and public, private, and hybrid…

---

## [Thunder Kubernetes Connector with Thunder ADC](https://community.a10networks.com/t/thunder-kubernetes-connector-with-thunder-adc/703)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [March 5, 2022, 12:17am UTC](https://community.a10networks.com/t/thunder-kubernetes-connector-with-thunder-adc/703 "2022-03-05T00:17:47Z")

</div>

In this article, we will see how Thunder Kubernetes Connector (TKC) can dynamically configure the Thunder ADC for load-balancing traffic to a Kubernetes cluster. Setup The K8s cluster consists of: Master: 172.16.1.12 N…

---

## [\[T&C\] HTTP/HTTPS URL Filtering with Thunder ADC/CFW](https://community.a10networks.com/t/t-c-http-https-url-filtering-with-thunder-adc-cfw/697)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [December 20, 2021, 7:40pm UTC](https://community.a10networks.com/t/t-c-http-https-url-filtering-with-thunder-adc-cfw/697 "2021-12-20T19:40:06Z")

</div>

In this article, we will look at how you can do HTTP/HTTPS URL filtering using Thunder CFW. Download and install web category license and database First, make sure you have the web category license on the Thunder dev…

---

## [\[T&C\] Firewall with Application-based Rate-Limiting using Thunder CFW](https://community.a10networks.com/t/t-c-firewall-with-application-based-rate-limiting-using-thunder-cfw/680)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [September 17, 2021, 6:21pm UTC](https://community.a10networks.com/t/t-c-firewall-with-application-based-rate-limiting-using-thunder-cfw/680 "2021-09-17T18:21:18Z")

</div>

In this article, we will see how you can use the Thunder CFW to rate-limit traffic on a per-application (or application category) basis. Objective Here, we want to rate-limit application traffic for each subscriber as …

---

## [\[T&C\] Harmony Controller: Send alerts to Microsoft Teams (Webhook URL)](https://community.a10networks.com/t/t-c-harmony-controller-send-alerts-to-microsoft-teams-webhook-url/657)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [May 20, 2021, 9:30pm UTC](https://community.a10networks.com/t/t-c-harmony-controller-send-alerts-to-microsoft-teams-webhook-url/657 "2021-05-20T21:30:20Z")

</div>

In this article, we will look at configuring Harmony Controller to send alerts to a Microsoft Teams channel (webhook URL). Objective Here we have a Thunder device with the following virtual service: slb virtual-server …

---

## [\[T&C\] Automate Application Delivery Operation Tasks with A10 and HashiCorp NIA](https://community.a10networks.com/t/t-c-automate-application-delivery-operation-tasks-with-a10-and-hashicorp-nia/653)

<div class="topic-metadata">

**Author:** [@tmitsuhata](https://community.a10networks.com/u/tmitsuhata)\
**Replies:** 0\
**Last updated:** [April 21, 2021, 1:05am UTC](https://community.a10networks.com/t/t-c-automate-application-delivery-operation-tasks-with-a10-and-hashicorp-nia/653 "2021-04-21T01:05:42Z")

</div>

This article describes how you can use Thunder ADC integrating with HashiCorp Network Infrastructure Automation (NIA) solution which focuses on Day-2 networking tasks automation that can reduce the burden on operators ca…

---

## [\[T&C\] Firewall with Application Visibility using Thunder CFW](https://community.a10networks.com/t/t-c-firewall-with-application-visibility-using-thunder-cfw/650)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [March 19, 2021, 11:21pm UTC](https://community.a10networks.com/t/t-c-firewall-with-application-visibility-using-thunder-cfw/650 "2021-03-19T23:21:08Z")

</div>

Thunder CFW offers Gi LAN services consolidation to combine L4–L7 functions, including CGNAT, stateful firewall, and application visibility to integrate greater efficiencies on the Gi LAN. In this article, we will lo…

---

## [Monitor Application & Network using ACOS Prometheus Exporter](https://community.a10networks.com/t/monitor-application-network-using-acos-prometheus-exporter/644)

<div class="topic-metadata">

**Author:** [@a10tme](https://community.a10networks.com/u/a10tme)\
**Replies:** 0\
**Last updated:** [January 27, 2021, 12:49am UTC](https://community.a10networks.com/t/monitor-application-network-using-acos-prometheus-exporter/644 "2021-01-27T00:49:39Z")

</div>

This article describes how to setup Prometheus and A10 Thunder running pre-ACOS 5.0 version (e.g., 3.2, 4.1.4 or 5.1) using a Prometheus Exporter to gain application network visibility and operational insights. Promethe…

---

## [Application Network Visibility using the Prometheus and A10 Thunder](https://community.a10networks.com/t/application-network-visibility-using-the-prometheus-and-a10-thunder/643)

<div class="topic-metadata">

**Author:** [@tmitsuhata](https://community.a10networks.com/u/tmitsuhata)\
**Replies:** 0\
**Last updated:** [January 26, 2021, 6:50pm UTC](https://community.a10networks.com/t/application-network-visibility-using-the-prometheus-and-a10-thunder/643 "2021-01-26T18:50:39Z")

</div>

This article describes how to set up Thunder ADC and Prometheus to gain application network visibility and operational insights using a visualization tool like Grafana. A10 Thunder supports a logging system to monitor …

---

## [\[T&C\] Example of using SNI with aFleX](https://community.a10networks.com/t/t-c-example-of-using-sni-with-aflex/637)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [December 21, 2020, 7:40pm UTC](https://community.a10networks.com/t/t-c-example-of-using-sni-with-aflex/637 "2020-12-21T19:40:40Z")

</div>

In an SSL/TLS handshake, the name of the server being accessed is sent using the SNI extension in the Client Hello message. For example, suppose you access the site https://intranet.a10tests.com, it will show up in the …

---

## [\[T&C\] Using DNS over HTTPS (DoH) while preserving Client IP](https://community.a10networks.com/t/t-c-using-dns-over-https-doh-while-preserving-client-ip/636)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [December 21, 2020, 7:33pm UTC](https://community.a10networks.com/t/t-c-using-dns-over-https-doh-while-preserving-client-ip/636 "2020-12-21T19:33:17Z")

</div>

Thunder CFW enables you to provide DNS over HTTPS (DoH) service to end-users without having to upgrade the DNS infrastructure itself. Here is a sample setup: The client browser (in this case Firefox browser) is conf…

---

## [\[T&C\] DNS over HTTPS (DoH) and DNS services on the same VIP](https://community.a10networks.com/t/t-c-dns-over-https-doh-and-dns-services-on-the-same-vip/635)

<div class="topic-metadata">

**Author:** [@siddharthaa](https://community.a10networks.com/u/siddharthaa)\
**Replies:** 0\
**Last updated:** [December 21, 2020, 7:13pm UTC](https://community.a10networks.com/t/t-c-dns-over-https-doh-and-dns-services-on-the-same-vip/635 "2020-12-21T19:13:44Z")

</div>

DNS over HTTPS (DoH) is a protocol for securing DNS communication by sending DNS queries and getting DNS responses over HTTPS. In DoH, each DNS query-response pair is mapped into an HTTP exchange. For details, refer to R…

---

## [How to deploy Thunder Container ?](https://community.a10networks.com/t/how-to-deploy-thunder-container/634)

<div class="topic-metadata">

**Author:** [@gokulpokuri](https://community.a10networks.com/u/gokulpokuri)\
**Replies:** 0\
**Last updated:** [December 14, 2020, 8:41pm UTC](https://community.a10networks.com/t/how-to-deploy-thunder-container/634 "2020-12-14T20:41:31Z")

</div>

This article provides you the steps on how to deploy A10 Thunder in the cloud native environment. What is Thunder Container ? Thunder Container is a containerized ACOS image that is deployed by using Docker on a host op…

---

## [Ansible Playbook Examples for ADC Features](https://community.a10networks.com/t/ansible-playbook-examples-for-adc-features/633)

<div class="topic-metadata">

**Author:** [@gokulpokuri](https://community.a10networks.com/u/gokulpokuri)\
**Replies:** 0\
**Last updated:** [December 14, 2020, 6:50pm UTC](https://community.a10networks.com/t/ansible-playbook-examples-for-adc-features/633 "2020-12-14T18:50:18Z")

</div>

This article provides some Ansible playbook examples for application acceleration and optimization features for Thunder ADC shown below. Each playbook uses the respective acos\_axapi module for that feature. A10 acos\_axap…

---

## [How to automate basic Thunder ADC config using Ansible ?](https://community.a10networks.com/t/how-to-automate-basic-thunder-adc-config-using-ansible/632)

<div class="topic-metadata">

**Author:** [@gokulpokuri](https://community.a10networks.com/u/gokulpokuri)\
**Replies:** 0\
**Last updated:** [December 11, 2020, 9:46pm UTC](https://community.a10networks.com/t/how-to-automate-basic-thunder-adc-config-using-ansible/632 "2020-12-11T21:46:03Z")

</div>

Ansible is an open-source software tool facilitating configuration management, application deployment, IT, and infrastructure automation. The playbook used in this article provides the steps on how to configure basic La…

---

## [Automated Service Discovery using HashiCorp Consul](https://community.a10networks.com/t/automated-service-discovery-using-hashicorp-consul/631)

<div class="topic-metadata">

**Author:** [@tmitsuhata](https://community.a10networks.com/u/tmitsuhata)\
**Replies:** 0\
**Last updated:** [December 10, 2020, 12:27am UTC](https://community.a10networks.com/t/automated-service-discovery-using-hashicorp-consul/631 "2020-12-10T00:27:25Z")

</div>

This article describes how to use the Thunder ADC integration with HashiCorp Consul for automated application delivery. Thunder ADC directly polls associated services catalog from Consul periodically while serving user t…
