F5 BIG-IP Report Generator

Turn one or more .ucs backups or bigip.conf / SCF files into one interactive, self-contained HTML report — virtual servers, pools, iRules, GTM/DNS, AFM firewall & NAT, an SSL-certificate expiry inventory, a topology explorer, a listener simulator and a live f5-query console. Load several devices to see how they relate as tiers (GTM → LTM tier 1 → LTM tier 2, …).

Everything runs entirely in your browser. Your configuration is read, decrypted and rendered locally by WebAssembly on this device. It is never uploaded — no server, no API, no network request touches your data. Once this page has loaded you can even go offline (or save it and open it from disk) and it still works.

Encrypted UCS files are decrypted in-page with a pure-Rust OpenPGP implementation; the passphrase you enter never leaves the browser either.

Configuration files

Drop files here, or click to choose

.ucs (plain or encrypted) · bigip.conf · .scf — one or more devices

UCS passphrase (only for encrypted UCS)

Report title

Embed the in-browser f5-query console (larger file)

loading engine…

Report ready. It downloaded automatically.

Open in a new tab ↗ Download again ↓

How does this work, and why is it private?

The generator is the F5 BIG-IP query engine (tcl-bigip-query) plus the report renderer, compiled from Rust to WebAssembly. When you pick a file the bytes are handed straight to the WASM module in this tab:

an encrypted .ucs is decrypted in-page (OpenPGP symmetric, RustCrypto) using your passphrase;
the archive is expanded to SCF and parsed;
the f5-query engine builds the object model, reference graph and orphan analysis;
the SSL-certificate inventory is read from the sys file ssl-cert stanzas, and days-to-expiry is computed against your clock;
the whole thing is rendered to one standalone HTML file you download.

No step makes a network call. You can verify this in your browser's DevTools → Network panel: generating a report produces zero requests.