F5 Meetup presentation automation 2017
•Download as PPTX, PDF•
6 likes•660 views
Presentation presented at the first F5 Meetup in August 2017
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to F5 Meetup presentation automation 2017
Similar to F5 Meetup presentation automation 2017 (20)
Recently uploaded
Recently uploaded (20)
F5 Meetup presentation automation 2017
- 1. Guy Brown – SE Gagan Delouri - SE
- 5. F5 iApps provides: • L4-7 Config Abstraction • Full platform capability • Site-specific customization Resulting in: • Fast time to value • Faster time to change • Reduced operation risk Admin Application Experience: Performance, High- Availability, and Security RouterSwitch L2 – L3 ADC ADC L4 – L7 ADC Network Application Services Policy ACCESS & IDENTIT Y FIREWAL L CONTEX T LOAD- BALANCIN G GATEWA Y SERVICE S SECURIT Y OPTIMIZ- ATION DDoS PROTECTI ON MOBILIT Y iApp
- 6. F5 iWorkflow Provides: • L4-7 Service Abstraction • Tenant/Provider Service Model • RBAC • Licensing Resulting in: • Simplified integration • Reduced deployment complexity • Repeatability Admin Application Experience: Performance, High- Availability, and Security ADC ADC ADC L4-7 Services Application Services Policy ACCESS & IDENTIT Y FIREWAL L CONTEX T LOAD- BALANCIN G GATEWA Y SERVICE S SECURIT Y OPTIMIZ- ATION DDoS PROTECTI ON MOBILIT Y Service Catalog HTTP Simple HTTPS Simple HTTPS Advanced HTTPS PCI iAppiWF
- 8. My application needs SSL encryption and availability
- 9. iRules iControl iApps iCall tmsh Data Plane Programmability Programmable Management API in SOAP and REST Enterprise Apps, Orchestration and BIG-IQ Event based handlers On-box Tcl based shell and programming utility DevCentral
- 10. TMOS Platforms VIPRION Platform BIG-IP Platform BIG-IP Virtual Edition DevCentral What really makes programmability valuable TMSH The CLI that does it all iControl One API to rule them all iApps Packaged business logic and templatization iCall Events, triggers and handlers for the control-plane iRules Real-time, full-proxy events for the data-plane User Interfaces iControlTMSH GUI (TMUI) TMOS Proxy TMOS Microkernel: (Data Plane) iRules TMOS Management: (Control Plane) iCalliApp DevCentral Customer/ Developer
- 11. What we can do with Automation ?
- 12. Provisioning Tool Private Data Center x1000 BIG-IP devices Public Cloud x100 BIG-IP VE
- 13. Security Policy Admin Provisioning Tool iApps • Build BIG-IP LTM policies & deploy across multiple environments with consistency • Deploy ASM/APM/AFM polices using the App-services iApps Manage & deploy security policies consistently across your infrastructure or for your tenants • Forgetting, or missing, a device when patching or deploying secure config could expose your corporation to attackers both internal and external. BIG-IP devices Development environment Test environment Production environment
- 14. BIG-IP • Automate routing traffic & connection termination by managing LTM and BIG-IP DNS configurations • Upgrade/Deploy new applications on the BIG-IP consistently & with low risk Manage Blue-Green deployments during applications roll up for zero down time Data Center 1 Data Center 2
- 15. Cloud Migration • Provision & Automate BIG-IP infrastructure& configurations in VMware, OpenStack, AWS, Azure • Using CFT, HEAT templates and so on • An application can begin in VMware environment but expand to AWS & Azure. Orchestrate & Automate in multiple private & public cloud environments
- 16. Automation Tool BIG-IP Platform other Versions 12.X + BIG-IP VE F5 Dependencies 2 3 REST/SOAP API callsRight Version of Tool 1
- 17. F5 & iControl REST
- 21. https://192.168.1.1/mgmt/ Root NOTE: Resource names map ‘~’ to ‘/’ (e.g. ~Common~mypool is really /Common/mypool) Collection pool/ Organizing Collection(s) tm/ltm/ Sub-Collection Resource ~Common~m1:80 Sub-Collection members/ Resource ~Common~mypool /
- 23. • • • • • • • •
- 24. F5 & Ansible
- 25. Ansible host FACTS BIG-IP Platform other Versions 12.X + Versions 2.2 + BIG-IP VE Bigsuds, f5-sdk 1 2 3 REST/SOAP API calls • Easy to install • Agentless • ‘Playbooks’ use YAML
- 26. F5 Modules Supported in Ansible 2.3
- 27. Name of Ansible module Parameters Name of Task ”{{ myVirtualServer_IPAddress }}”
- 28. 1. Grab template 2. Upload iApp to BIG-IP 3. Deploy Application from GitHub/F5 Downloads Input/Parameters provided as JSON payload - name: Get iApp from Github get_url: url: https://github.com/F5Networks/f5-application-services-integration- iApp/releases/download/v2.0.003/appsvcs_integration_v2.0.003.tmpl dest: /var/tmp validate_certs: False - name: Add iApp template bigip_iapp_template: server: “((inventory_hostname}}" user: “admin" password: “admin" content: "{{ lookup('file', '/var/tmp/appsvcs_integration_v2.0.003.tmpl') }}" state: "present" validate_certs: False delegate_to: localhost - name: Deploy iApp bigip_iapp_service: name: “HTTPApp" template: “<<template_name>>" parameters: "{{ lookup('file',’<<payload.json file>>') }}" server:”((inventory_hostname}}” user: "admin" password: "admin" state: "present" delegate_to: localhost
- 29. iWorkflow iCR Extensions RPM Libraries Python SDK App Services iApp Language/API Java, Javascript / REST Node.js / REST Python / REST TCL / REST What Can It Do? L4-L7 Service Catalog Deployment BIG-IP Device Provisioning (HA, Licensing, etc.) Service Insertion with Cisco APIC, VMWare NSX BIG-IP Device Provisioning (NTP, Licensing, DNS, VLANs, Self-IP) Factory Reset HA Pairing BIG-IP Device Provisioning (NTP, Licensing, DNS, VLANs, Self-IP) HA pairing Basic LTM config (pools, nodes, monitors, iRules, VIPs) Basic GTM config (pools, iRules, VIP, wide-ip) Customize & automate L4- L7 application services for BIG-IP and iWorkflow LTM Configuration ASM/AFM/APM Policy Deployment Where Can I Find It? downloads.f5.com Provisioning/Reset RPM HA Pairing RPM F5 GitHub Repository https://github.com/F5Networks/ F5 GitHub Repository https://github.com/F5Networks/ How Do I Learn More? iWorkflow Wiki Home DevCentral Article Library Documentation Library Documentation .com
- 30. Puppet Chef Ansible Language/API Ruby / REST Ruby / SOAP Python / REST & SOAP What Can It Do? BIG-IP Device Provisioning (VLANs, Self-IP, Partitions) Basic LTM config (pools, nodes, monitors, iRules, VIPs) iApps deployment BIG-IP Device Provisioning (VLANs, Self-IP, Partitions) Basic LTM config (pools, nodes, monitors, iRules, VIPs) BIG-IP Device Provisioning (Licensing, DNS, NTP, VLANs, Self-IP, Partitions) Basic LTM Config (pools, nodes, monitors, iRules, VIPs) Basic GTM Config (pools, VIP, iRules, wide-ip) Where Can I Find It? F5 Module Target Cookbook Ansible Library How Do I Learn More? UDF Puppet Documentation UDF Documentation UDF Module Documentation
- 32. SaaS & Multi-tenancy Introduction • • • Use Case: • • •
- 36. • • • •
Editor's Notes
- This is where iApps come into play. iApps are the templatization of application delivery policy. iApps take all the rich functionality that we learned from our Alliance Partnerships, that same application fluency that formed the deployment guides, and turns them into an intuitive, wizard-style implementation. As an example, I saw this demo myself in one of our Technology Centers, the Exchange Deployment Guide, all 119 pages of instruction, which takes a typical admin a week to work through, this was boiled down to 5 simple questions. In just a couple of minute, the same complex, yet functionally rich implementation has taken place and, here’s a really important part, no functionality was sacrificed. You’ll see the market followers out there pushing ease of deployment, but without F5’s history and application fluency, they will fall short of expectation.
- This is where iApps come into play. iApps are the templatization of application delivery policy. iApps take all the rich functionality that we learned from our Alliance Partnerships, that same application fluency that formed the deployment guides, and turns them into an intuitive, wizard-style implementation. As an example, I saw this demo myself in one of our Technology Centers, the Exchange Deployment Guide, all 119 pages of instruction, which takes a typical admin a week to work through, this was boiled down to 5 simple questions. In just a couple of minute, the same complex, yet functionally rich implementation has taken place and, here’s a really important part, no functionality was sacrificed. You’ll see the market followers out there pushing ease of deployment, but without F5’s history and application fluency, they will fall short of expectation.
- https://devcentral.f5.com/wiki/iApp.AppSvcsiApp_overview.ashx
- All these programmability options are not in silos We have TMSH which is like CLI on the box with pretty good TCL scripting capabilities iControl REST and SOAP you guys must be aware off iApps Which is packaged business logic we will talk about the same iCall this is for visibility and conrtrol iRule this to manipulate the application traffic both at server side and client side. Like I said all these capabilities are not in Silos they are very well used to gether.
- Device = Physical BIG-IP and VE RPM (Node.js) Libraries: Provisioning Settings & Reset Download: https://devcentral.f5.com/d/f5-devops-library-provisioning-230 Provision BIG-IP device NTP servers & timezone Licensing BIG-IP using single registration key, supports BYOL Syslog server FQDN Device name DNS search domain list Factory Reset BIG-IP Device Factory reset via standard iControl REST API Eliminates all data plane configuration, device trust, and system settings Management IP and licenses are not reset HA Pairing Download: https://devcentral.f5.com/d/f5-devops-library-clustering-231 Provision a basic BIG-IP HA pair 2 device Active/Standby cluster Single default traffic group Automatic cluster synchronization (CMI) Creation of vLAN and self-IP for HA sync
- Puppet support iApp v1 (TCL) deployments. NOT iApps LX (Node.js). Puppet Proxy is needed when Puppet Agent cannot be loaded directly on the managed device. Target wrote a Chef cookbook which is on their own GitHub repository (not on F5’s GitHub) Ansible module docs: https://github.com/F5Networks/f5-ansible/tree/master/docs/modules