IBM TechXchange North Texas Integration User Group

IBM DataPower Gateway 10.6.0.0, released on June 13th, 2024, introduces several enhancements and new features to improve security, usability, and performance for enterprise-grade API gateway operations. Here's a brief overview of what's new, changed, and other important details.

What's New

• OIDC Authentication for RBM: This feature supports OpenID Connect (OIDC) authentication to RBM, enhancing security by connecting to an OIDC identity endpoint to retrieve public keys for validation.

• Enhanced GitOps Integration: Users can define and manage GitOps variables, test templates, and view statuses. The new gitops-remove-template command simplifies management tasks.

• Disable TLS Renegotiation: Administrators can configure TLS profiles to disable TLS renegotiation, bolstering security completely.

• LDAP Connection Pool Support: This allows the configuration of LDAP connection pools, including cache flushing capabilities, improving LDAP server interactions and performance.

• JSONata Function Expansion: Additional JSONata functions from the Date/Time function library are now supported for use in assembly actions, expanding data manipulation capabilities.

• API Subscriber Status Enhancements: This feature includes information about the action and party that last modified an application or client key, providing better tracking and auditing capabilities.

What's Changed

• Library Upgrade for TLS Support: The cryptographic library now supports TLS, enhancing security and usability while introducing added complexity that may impact performance.

• Password Aliases: The maximum character length for plaintext and encrypted passwords has been increased from 127 to 512 characters.

• TLS Server Profile Defaults: The default TLS server profile now only supports TLS 1.2 and TLS 1.3, with preferred cipher suites ensuring secure connections. IBM recommends using custom TLS profiles for client connections.

Everything Else

• WebGUI Deprecation: The DataPower WebGUI is now deprecated. Upon login, users will default to the new UI and cannot switch back. For any issues, contact IBM Support.

• Deprecated Features: Certain features have been marked for deprecation and will be removed in future releases. Users should migrate to alternative configurations as soon as possible.

• Known Limitations and Restrictions: DataPower 10.6.0.0 has known limitations and restrictions detailed in the release notes. Reviewing these notes is encouraged to understand potential impacts on your environment.

• Compatibility and Installation: Use the Software Product Compatibility Reports (SPCR) website to verify compatibility with API Connect and other IBM products. The IBM documentation provides detailed instructions for installing and upgrading DataPower Gateway 10.6.0.0.

IBM DataPower Gateway 10.6.0.0 is a significant release with numerous new features and enhancements designed to optimize your API gateway operations. For more information, refer to the official IBM documentation.