The cloud is transforming the way businesses deploy and manage applications. Organizations are increasingly deploying and migrating applications to public and private clouds primarily to drive agility, operational efficiency and cost savings. While we all recognize the benefits of Cloud, the fact is that there are significant differences between how an application runs in a public IaaS provider data center designed for multiple tenants and how it runs in your private enterprise datacenter. Whether applications are revenue generating or critical business apps, they must ensure the same great user experience, including across associated availability, performance, and security services. However, there are challenges that need to be addressed, including determining which workloads are suitable for the cloud due to the inherent design of cloud data centers, the application delivery and security capabilities of each cloud provider, and the overall lack of visibility and control. Attend F5 Networks presentation session to learn how App-Centric Strategy provides the critical services to make your business applications GO SMARTER. FASTER. SAFER whether you’re planning to architect a public cloud, private cloud, hybrid cloud, deploy or re-architect your apps, or migrate to SaaS.

1. © 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Architecting Application Services
For Hybrid Cloud
Michael Quek
Regional Director, ASEAN
F5 Networks

3. Performance
Security
Control Consistency
Reliability

5. Data Center
App App
APPLICATION SERVICE CONTROL PLANE
Reliability and availability
Enhance applications performance
Hardened the entire app stack
The Notion of Application Services

6. App App
The Notion of Application Services
App AppApp AppAppApp App App
Data Center
APPLICATION SERVICE CONTROL PLANE
AVAILABILITY PERFORMANCE SECURITY

7. APPLICATION SERVICE CONTROL PLANE
App App
The Notion of Application Services
App AppApp AppAppApp App App
Data Center

8. Traditional Data Center
Private Cloud CoLocation PaaS/SaaS Managed Service
Provider
APPLICATION SERVICE CONTROL PLANE
APPLICATION SERVICE CONTROL PLANE
Silverline
F5 BIG-IP Software
(Virtual Edition)
F5 BIG-IP Appliance F5 Viprion
Modular Platform
F5 Managed
Security Service
Freedom
to deploy any application, anywhere, with consistent
application services and security.

9. Public Cloud
App Proxy + Local Traffic Mgmt
+ DNS/GSLB + SSL Offload +
Programmability
On-Premises Data Center
App Proxy + Local Traffic Mgmt +
DNS/GSLB + SSL Offload +
Programmability
Web/App Tier
Web/App Tier
ISP
Remote
Employees
Attackers
Customers
Distributed
DNS/GSLB
Apps
F5 Availability
Services
Apps
F5 Availability
Services
Intelligent load balancer
and auto scale capability
L7 / Application visibility
(e.g. : 1 IP for all apps, app
performance visibility)
Multi-cloud global availability
(active-active cloud platform)
Application acceleration
Application Delivery Services
Enhance Availability and Performance of Cloud-based Applications
Extend/burst application workload
to the cloud (go hybrid)

10. Extend/Burst Application Workload to the Cloud
L4-7 Services
Data Center [Malaysia]
Compute
Storage
AWS [Singapore Region]
L4-7 ServicesVPN
GSLBGSLB
Compute
Storage
App Users

11. Cloud Traffic Optimization Solution with
Context-Aware Programmability
Solution Background and Needs
• Increasing connection handling capacity—
caused by long live connections on push
applications
• Needs to optimize/reduce compute
instances on AWS
Key Benefits
• Reduce OpEx and compute
instances on cloud
Public Cloud Region #1
Public Cloud Region #3
Public Cloud Region #2

12. F5 Agility 2015 12
Shared Security Responsibilities
While AWS manages security of the cloud, security in the cloud is the responsibility of the customer. Customers retain control of what security
they choose to implement to protect their own content, platform, applications, systems and networks, no differently than they would for
applications in an on-site datacenter.
https://aws.amazon.com/compliance/shared-responsibility-model/

13. © F5 Networks, Inc 13
The New Perimeter Is An App Perimeter
Apps Are The Gateways to Data
SSL
SSL
SSL
APP
PER-APP / PER-USER PERIMETERTRADITIONAL NETWORK PERIMETER
App

14. © F5 Networks, Inc 14
And, Identity Drives Application Access and Accessibility

15. © F5 Networks, Inc 15
BIG-IP APM
Identity Federation/SSO with Adaptive Authentication
On-Premises Infrastructure
Corporate
Applications
Users
Attackers
SaaS
Office 365
Google
Apps
Salesforce
Directory
Services
Corporate Users
Identity
federation
Public
Cloud
Private
Cloud
XYZ Corporation
LOGIN
8 3 2 8 4 9
SAML
Identity management
Multi-factor authentication
SAML
Real-time access control
Access policy enforcement

16. Development in the public cloud improved their Time-to-
Market
• Needed to ensure they fully manage the user
access to critical development environment –
instead of having developers physically coming
down to customer’s premise
• Simplify security management for third-party
access—Secured SSL VPN
• Skills retention
• F5 stringent endpoint checking control
• Eased operations for policy management
F5 vADC

17. App Security - Protect Web Applications and API Services
Manage Your Cloud Applications in a Secure Way
Network and Application DDoS Mitigation
Guarantee regulatory compliance
(e.g. PCI-DSS, FFIEC, HIPAA-HITECH)
Protect cloud apps and API from any
application attack
(e.g.: SQL-I, XSS, session hijacking, including top 10 OWASP
and unknown attack)
Track user and browser behavior and
filter automated access (botnet/scrapers)

18. © F5 Networks, Inc
F5 Application Security
Dynamic Web Application Firewall
Request made
« ‘ OR 1=1 # »
BIG-IP ASM security
policy checked
Request load-
balanced to server
DLP scrubbing &
application cloaking
Vulnerable
application responds
Devices
Secure response
delivered
BIG-IP Platform
1.2.3.4
Data Center
Hypervisor
Virtual
Physical
Private/Public
Cloud
Malicious request
detected.Request blocked
MyBank
Banking & Investments
Query: SELECT UserID, CreditCard from database where UserID=‘bloggsj’
Results:
+----+----------+---------------------+
| ID | UserID | CreditCard |
+----+----------+---------------------+
| 1 | bloggsj | **** **** **** **** |
| 2 | bloggsj | **** **** **** **** |
+----+----------+---------------------+

19. F5 Cloud Vision
PRIVATE CLOUD PUBLIC CLOUD
HYBRID CLOUD
On premises Off premises
Availability
&
Scalability
Security
&
Access
Visibility
&
Orchestration
Freedom To Deploy Any Applications, Anywhere, With Consistent Application
Services and Security

20. 1. Hybrid DC with Consistency Security Policies
2. F5 Dynamic Auto Scaling in AWS
Visit F5 Booth
Get F5 Evaluation License in AWS