Release Notes


A10 Harmony Controller HC-5.1.0


Supported versions
A10 Thunder
5.0.0, 5.0.0-P1, 5.1.0 (to be released soon)
A10 Thunder
4.1.4-GR1-P2 [No Config Management]
A10 Lightning ADC
4.x, 5.0.0, 5.1.0
Harmony Apps
ADC App: 5.0.0-v3.1,
CGN App: 5.0.0-v3.1,
GiFW App: 5.0.0-v3.1
A10 Kubernetes Connector (Secure Service Mesh)
ICL-2.0.6, ICL-2.0.9, ICL-3.0.0

New Features

  1. Ability to launch vThunder in AWS and Azure in addition to VMWare vCenter environment from Harmony Portal.
  2. Ability to create multiple provider on a Harmony Controller instance is restored.
  3. Harmony Controller can now obtain license from A10 Enterprise License Manager (ELM) in addition to A10 Global License Manager (GLM).
  4. License to a Thunder device can be assigned from Harmony Controller. Access to GLM or ELM from the device is still needed.
  5. Canned alerts are added for infrastructure as well as application services to improve usability.
  6. Requirement to open port in Firewall to allow traffic from Harmony Controller to Thunder is eliminated. Now, Thunders from behind a Firewall can connect to Harmony Controller seamlessly.
  7. For collecting feedback from customers, early access of the ability to generate PDF reports for application service analytics, is provided.

Known Issues

Item ID
Due to the issues in Microsoft Edge, Single Sign On (SSO) for editing
application configuration fails. Using Google Chrome is advised for smooth
In case of HA Fail-over, analytics shows the new active device status
even for historical data that belongs to old device.
For vThunder, partition CPU usage is approximate. If only one
partition is there in Thunder device, it may not show the same value as
Device CPU usage.
In some remote cases, while installing Harmony Controller software on
single A10 HarmonyTM Controller 2000 appliance, a harmless message
saying ‘No resources found’ may show up. After a few messages,
installation will proceed normally and complete successfully.
In a few cases, Harmony Controller may not work as expected when
installed on a VM having multiple network interfaces. It is recommended to
have default route attached to the network interface where controller
services are mapped.
In some cases, I/O CPU value of a Thunder device reported in
Harmony Controller may not match with the value reported in Thunder CLI
or UI.
New partitions or app services created on Thunder when
Harmony Controller is not reachable from Thunder is not automatically
synchronized with controller. De-registering the Thunder and
registering again brings all information to the controller.
Harmony Controller will not work properly for large number of partitions on
a Thunder.
Harmony APIs have changed. This may break existing automation around
Harmony APIs. Please consult A10 team for details.
Login with Google oAuth to Harmony Portal has issues. It is recommended
to use other authentication providers.
Admin users created on Thunder devices after registering them to
Controller, do not get synchronized with Controller even after
configuration scan. Deregistering Thunder and Registering again will fix
the problem. However,mapping Partitions to Tenants may be required again.
If Thunder VCS cluster does not have a floating IP address, it does not
register properly with Harmony Controller. It is recommended to always
have floating IP address assigned to the VCS cluster.
The Thunder cluster launched by Harmony Controller in VMWare vCenter
environment always has cluster type ‘Single’. HA or VCS clusters needs to
be launched manually and attached to the Harmony Controller.
Partitions (and other associated objects) deleted directly at Thunder remain
visible in Harmony Portal and may lead to errors. It is recommended to
delete partitions from Harmony Portal.
Harmony Controller connects to Thunder management interface only on
port 443.
When the configured external authentication service (e.g. LDAP, Radius,
etc.) is down, there is no way to login to Harmony Portal. Please
restore the authentication service before trying to login.
Only one Provider account can be created on a Harmony Controller.
Support for having multiple providers is temporarily suspended.
Configuring multiple Thunder devices or Application services together from
Harmony Portal is temporarily not available. Backed up configuration can
still be pushed on multiple devices.
Option to schedule image upgrade of Thunder devices is from Harmony
Portal is temporarily not available.
Few system created tenant accounts may be visible to Provider admins.
These are for internal use by Harmony controller sub-system. Users are advised not to
change anything in these accounts.
When Thunder configuration with multiple Virtual IP addresses (VIPs)
is created via Harmony Portal and pushed to a Thunder device, analytics
information for all these VIPs does not show up properly. It is recommended
to configure one VIP at a time.
For now, the generated alerts are stored only for two days.
In case of assigning device license to VCS cluster, license is allocated only to the
Master. License to blades is to be allocated manually.
When configuration for a partition is modified by two different users (Provider
admin and Tenant admin) in two different scopes (device and application service),
full configuration is pushed to Thunder when any one of them decides to push.
Co-ordination between provider and tenant admins is recommended.
HARMONY- 18262
The Thunder cluster launched by Harmony Controller in VMWare vCenter
environment always has cluster type ‘Single’. HA or VCS clusters needs
to be launched manually and attached to controller.
When Thunder configuration with multiple Virtual IP addresses (VIPs) is
created through Harmony Portal and pushed to a Thunder device, analytics
information for all these VIPs does not show up properly. It is recommended
to configure one VIP at a time.
When Thunder configuration is modified directly on Thunder, it does not
automatically synchronize with the Controller. Using ‘Scan’ option brings
the configuration to Controller from the device. However, making all
configuration changes from Harmony Portal (Global Object Explorer) is
recommended after registering Thunder to Controller.
Options for scheduled device configuration backup and restore from
Harmony Portal are temporarily reduced – only daily backup is available
for now. Also, there is no way to delete a scheduled backup task.
In Harmony Portal, Tenant admins can view the portions and associated
application services that do not belong to them. Recommended is not to
onboard application service that require strict access control.
When name of a Tenant is altered in Harmony Portal, some places may still
display the old name.
While displaying difference between old and new configuration, the
coloring of config blocks may be incorrect.
When a new partition is created on Thunder using Harmony Portal, the
portal displays the newly added partition even if the actual creation
fails. This leads to errors when other operations are tried on such
partition. It is recommended tocarefully check the status in workflow
window before proceeding further.
When existing configuration is imported or scanned from Thunder device,
some properties may not show up properly in Harmony Portal.
The Thunder Onboarding help that pops up on first time login does not
display how-to perform the steps. Recommended is to use product
documentation for details.
When size of Thunder configuration backup file is large, configuration
backup from Thunder to Harmony Controller fails.
When size of Thunder configuration is large, configuration push from
Harmony Controller to Thunder fails.
Certain portions of Thunder configuration are not being deployed properly
when pushed to Thunder from Harmony Controller.
In some cases, to avoid disruption of environment or application traffic,
configuration push from Harmony Controller to Thunder may not succeed.
When a user has access to more than one tenant account, information of
only one tenant is presented to the user even upon selecting different
tenant account.
In tenant dashboard, under application services, number of generated
and processed logs are displayed instead of log rate and the label is


We are available at your service on Phone, and Email:

Phone: 1-888-TACS-A10 (Toll-Free USA & Canada). 1-408-325-8676 (International)