Securing the Cloud: F5 Enterprise Cloud Architecture

1
Securing the Cloud:F5 Enterprise Cloud Architecture

New Virtual Application Delivery Controller
BIG-IP Local Traffic Manager Virtual Edition (VE)
Enterprise to Cloud - AAA services, Access Control and Acceleration Services
BIG-IP Edge Gateway for Access and Acceleration for the Cloud
Enterprise to Cloud - Web Application Attack protection
Application Security Manager (ASM) with Simplified CSRF protection
Securing the Cloud – BIG-IP v10.2

Virtualization to Cloud Maturity Model
Separate
Consolidate
Aggregate
Automate
Liberate
Self-Managing Datacenters
Server Consolidation
Test and Development
CapacityOn Demand
Enterprise Computing Clouds On and Off Premise
Public
Private
Or
Here
Or
Here
Or
Here
You Are Here
Enterprise Objective: An IT Services On-Demand Platform

F5’s Dynamic Control Plane Architecture
Users
Dynamic
Control
Availability
Scale
HA / DR
Bursting
Load-Balancing
Optimization
Network
Application
Storage
Offload
Security
Network
Application
Data
Access
Management
Integration
Visibility
Orchestration
Application and Data Delivery Network
Resources
Private
Public
Physical
Virtual
Multi-Site DCs
Cloud

Problem: Secured Load-Balancing and Traffic Management in the Cloud
Users
Limited:
Different models per cloud service
No commonality with enterprise
LB scale can vary dramatically*
Very limited security
Limited control content / app switching
No transaction integrity / persistence
Limited network / application acceleration
No user context to apply policy
and on and on…..
Flexibility, Context,and Control in the Enterprise
…but not in the Cloud
Resources
Private
Public
Physical
Virtual
Cloud
Multi-Site DCs
*Rightscale White Paper: Load-Balancing in the Cloud

F5 Solution: Extend Enterprise-Class ADC to Internal / External Cloud
Users
Enterprise Ready Cloud:
Common / shared architectural model
Predictable, High Performance LB Scale
Rich content switching
Full transaction integrity / persistence
Superior security
User and application context
Network and application acceleration
Flexibility, Context,and Control in the Enterprise
….and the Cloud
BIG-IP LTM
Virtual Edition
BIG-IP LTM
Virtual Edition
Resources
Private
Public
Physical
Virtual
Cloud
Multi-Site DCs

Problem: Access Control & Acceleration Across The Maturity Cycle
Users
No context
Difficult change control
Error prone
Costly
Licensing / vendor management issues
Compliance problems
Limited control
Lack of Simplicity, Flexibility, Context,and Control for the Enterprise
AAA x 10
AAA x 5
AAA x 2
VPN
Web Accelerator
WAN Optimizer
DNS Bind Server
Vendor A
Vendor B
Vendor C
Open Source
?
Resources
AAA
AAA
AAA
AAA
AD
AAA
AAA
AAA
AAA
CA
AAA
Private
Public
TAM
AD
AD
OAM
LDAP
Physical
Virtual
Cloud
Multi-Site DCs

F5 Solution: Extend Next GenAccess & Acceleration to the Cloud
Users
Simplicity, Flexibility, Context,and Control for the Enterprise
Unified access & acceleration model
Simplified change control and auditing
Flexible access policies
Context-aware: user, device, location, and application
Control remains within enterprise
Secure Optimized Session
AAA
BIG-IP Edge Gateway
BIG-IP Global Traffic Manager
User Requests
Optimal Gateway
VPN
Web Accelerator
WAN Optimizer
DNS Bind Server
Vendor A
Vendor B
Vendor C
Open Source
Resources
Secure Optimized Session
AAA x 5
AAA x 2
AAA x 10
AAA
AAA
AAA
AAA
AD
AAA
AAA
AAA
AAA
CA
AAA
Private
Public
TAM
AD
AD
OAM
LDAP
Physical
Virtual
Cloud
Multi-Site DCs

Applications
Clients
F5 Solution: Seamless Access to Applications
BIG-IP
Edge Gateway
New in 10.2
Edge Client Integration with Windows logon provides seamless VPN access
Access Control for the Cloud

F5 Solution: Application Security Manager
Users
w/Security Policy
Application Firewall
Content Scrubbing and Application Cloaking
Policy Enforcement
User Requests
Resources
Private
Public
Physical
Virtual
Multi-Site DCs
Security Enforcement inbound (Request) as well as outbound (Response)
traffic protecting the application from attacks including OWASP top 10
Cloud

F5 Solution: BIG-IP Application Security Manager (ASM) with CSRF Attack Protection
With v10.2 protection is easy to configure from the UI

Securing the Cloud: F5 Enterprise Cloud Architecture

by jasonenriquez on Apr 23, 2010

Accessibility

Categories

Tags

Upload Details

Usage Rights

1 Embed 21

Statistics

Securing the Cloud: F5 Enterprise Cloud Architecture — Presentation Transcript