F5 User Group



                8/18/2012
Who is Peoplefluent?
Peopleclick + Authoria + Acquire = Peoplefluent
    • Human Resources Internet SaaS vendor
    • Multi-Tenant portals
        • Recruitment Management
             – Career Portals for candidates
             – Applicant tracking, Interview Scheduling, Onboarding
        • Vendor Management
             – Contingent staff placement and procurement
             – Hourly worker time entry and management
        • Talent Management
             – Performance review/appraisal process
             – Ongoing career management
        • Diversity and Affirmative Action
             – Compliance planning and reporting
Growth via Acquisition
Peoplefluent adds on Strategia and Socialtext
        • Learning Management
            – Online, in classroom or virtual classroom
            – Content Management
            – Skills and Compliance Management
            – Social Learning
            – Reporting
        • Social Collaboration
            – Social Dashboards
            – Visible Activity Streams
            – Content Creation/Integration
Diverse Client Base
High-Tech       Energy/Utilities     Financial   Food/CPG




Manufacturing
High Tech       Healthcare/Biotech   Retail      Other
Peoplefluent Global Footprint: Client Locations


                                                             Iceland
                                                                         Sweden
                                                                                     Finland
                                                               Norway
                                                                                   Estonia Lithuania Belarus
                                             United Kingdom         Denmark       Latvia          Poland
                                                                                                                     Russian Federation
                                                    Ireland    Germany                           Czech Rep
              Canada                                                                         Slovakia
                                              Netherlands
                                                Belgium                             Austria Ukraine
                                            Luxembourg France                    Hungary
                                                                                 Bulgaria Romania Kazakhstan
                                                     Switzerland Slovenia                          Georgia
                                                 Portugal          Croatia                Serbia and Montenegro
             United States                                             Italy Greece        Turkey      Azerbaijan
                                                     Spain                                                                      China      Japan
                                 Bermuda           Gibraltar               Malta Cyprus       Lebanon      Behrain
                                                      Moracco      Tunisia          Israel         Kuwait    Qatar             South Korea
                                                                                         Jordan       United Arab Emirates
               Mexico                                     Algeria            Egypt                    Pakistan                    Taiwan
                                Domican Republic                                Saudi Arabia
                   Belize                                        Mali                           Oman      Bangladesh Lao      Hong Kong
                                      Puerto Rico
        Guatemala         Honduras                                 Burkina Faso   Yemen
         El Salvador               Trinidad and Tobago                                              India     Thailand Vietnam     Philippines
             Costa Rica                                  Senegal Nigeria
                                 Venezuela                                             Ethiopia                                               Guam
                   Panama                                                                                     Sri Lanka
                               Columbia
                                                         Cote D’Ivoire Cameroon                                               Malaysia
                              Ecuador                                                  Kenya                  Singapore
                                                                                                                           Indonesia
                              Peru                    Brazil
                                   Boliva                                              Zambia
                                       Paraquay
                                                                                                                                          Australia
                         Chile                                                      South Africa
                                           Uruguay
                                    Argentina
                                                                                                                                                 New Zeland
Who uses Peoplefluent Solutions?
Customer Service   Customer Scope     Customer Community

80% of the         5,000              6 millions
Fortune 100 use    organizations      employees and
Peoplefluent       use Peoplefluent   managers in
Solutions          Solutions          214 countries
F5 Products used
• LTM used in 5 of our ten datacenters
    –   Corporate HQ
    –   Atlanta and London Datacenters
    –   Disaster Recovery/Internal environments
    –   Austin Datacenter replacing Netscalers
•   Waltham datacenter will be converted to use LTM
•   Virtual LTM being considered for lab environments
•   Other datacenters will be consolidated
•   We use WhiteHat and looking into ASM
How we load balance
• Round Robin
   – Stateless applications virtuals/cloned
   – until products have issues or need persistence
• Dynamic methods
   – Observered member/node
   – Depends on the number of pools
• Priority Group Activation
   – Prefer to have at least 3 servers per pool (n+2)
   – 1 Cron Server, 2 web servers
   – Weblogic Reverse Proxy 3/6
   – WP1 Pools 1/1/1
Persistence
• Universal
   – iRule, jsessionid
• Cookie
   – Default insert and tried passive
• SSL Persistence
   – when using Client and Server SSL profiles
• Source IP
   – Bad, but we still do it in places (easy)
iRule Lessons learned
• iRule Editor
   – Now has bigip.conf and bigip_base.conf
   – Offline iRules
• iRule naming convention, versioning
   – TCP Connection
• iRule HTTP Events Flowchart
• TCL Errors
• Scripted bigpipe iRule changes
   – bigpipe virtual rule diffs before/after
   – Version 9 vs. version 10 changes (grep rule)
   – Postfix to email/page upon differences
iRules used to solve problems
• .NET/SQL application upgrade split
   – Using classes, switch glob
   – Akamai challenges
• Company name change/combination
   – Almost 1000 lines, nested if and switch
   – Allows URLs to remain hosted on the same servers (3+
     versions)
• Maintenance Pages
   – Allow class of IP addresses through for QA validation
   – Static/dynamic responses and redirects (client name changes)
   – robots.txt, Google site verification
   – Graphics/icons with hex conversion
• Block/Allow
   – URL, IP user-agent, HTTP verb, etc.
            ,
   – Faster and easier than firewall changes with our vendor
iRules used to solve problems (cont.)
• Referer replace
• Server Resource Cloaking
    – Removing Server headers
    – BigIP noserver
•   Apache Killer prevention (range headers)
•   TS-Edge JavaScript injection
•   Load Balance Failure
•   Low-cipher detection
•   Mobile/iPad application redirect
•   CAAMS pool switching
•   AUS Throttling users (using stats profile)
•   Pool Member Status
    – From DevCentral (upgrading to Joel Moses’ version)
iRules and Mmmm cookies
• Akamai Cookie
   – Prevents bypassing Akamai
   – Secures/restricts resources by IP
   – Not using Akamai’s site shield, so iRules and Akamai
     configuration must be in sync
• QA Test cookie
• eLearning cookie
   – Validate users
   – Referring host switch directs to appropriate
     resource
   – Allows a single VIP to host all of our environments
• Home Cookie Clean
• VMS Cookie Crumb Clean
Other things we are doing with LTM
• Compression
• WAN/LAN optimization
• Reviewing TCP and HTTP profiles for more
  improvement
• Fix slow connectivity with Chrome (bug)
• Health Monitors
   – Receive String
   – Session creation
What is our plan going forward?
• Gomez Real User Monitoring
    – Implement via iRules
•   Priority for iRules
•   Splunk
•   Upgrade to version 11
•   iApps/iControls
•   Implement Partitions?
•   iRule to show persistence tables
•   Migrate from bigpipe commands to tmsh
•   F5 Certification
Questions?


Matthew Leggett
Sr. Systems Engineer – Availability
matthew.leggett@peoplefluent.com

Peoplefluent f5 user group presentation

  • 1.
    F5 User Group 8/18/2012
  • 2.
    Who is Peoplefluent? Peopleclick+ Authoria + Acquire = Peoplefluent • Human Resources Internet SaaS vendor • Multi-Tenant portals • Recruitment Management – Career Portals for candidates – Applicant tracking, Interview Scheduling, Onboarding • Vendor Management – Contingent staff placement and procurement – Hourly worker time entry and management • Talent Management – Performance review/appraisal process – Ongoing career management • Diversity and Affirmative Action – Compliance planning and reporting
  • 3.
    Growth via Acquisition Peoplefluentadds on Strategia and Socialtext • Learning Management – Online, in classroom or virtual classroom – Content Management – Skills and Compliance Management – Social Learning – Reporting • Social Collaboration – Social Dashboards – Visible Activity Streams – Content Creation/Integration
  • 4.
    Diverse Client Base High-Tech Energy/Utilities Financial Food/CPG Manufacturing High Tech Healthcare/Biotech Retail Other
  • 5.
    Peoplefluent Global Footprint:Client Locations Iceland Sweden Finland Norway Estonia Lithuania Belarus United Kingdom Denmark Latvia Poland Russian Federation Ireland Germany Czech Rep Canada Slovakia Netherlands Belgium Austria Ukraine Luxembourg France Hungary Bulgaria Romania Kazakhstan Switzerland Slovenia Georgia Portugal Croatia Serbia and Montenegro United States Italy Greece Turkey Azerbaijan Spain China Japan Bermuda Gibraltar Malta Cyprus Lebanon Behrain Moracco Tunisia Israel Kuwait Qatar South Korea Jordan United Arab Emirates Mexico Algeria Egypt Pakistan Taiwan Domican Republic Saudi Arabia Belize Mali Oman Bangladesh Lao Hong Kong Puerto Rico Guatemala Honduras Burkina Faso Yemen El Salvador Trinidad and Tobago India Thailand Vietnam Philippines Costa Rica Senegal Nigeria Venezuela Ethiopia Guam Panama Sri Lanka Columbia Cote D’Ivoire Cameroon Malaysia Ecuador Kenya Singapore Indonesia Peru Brazil Boliva Zambia Paraquay Australia Chile South Africa Uruguay Argentina New Zeland
  • 6.
    Who uses PeoplefluentSolutions? Customer Service Customer Scope Customer Community 80% of the 5,000 6 millions Fortune 100 use organizations employees and Peoplefluent use Peoplefluent managers in Solutions Solutions 214 countries
  • 7.
    F5 Products used •LTM used in 5 of our ten datacenters – Corporate HQ – Atlanta and London Datacenters – Disaster Recovery/Internal environments – Austin Datacenter replacing Netscalers • Waltham datacenter will be converted to use LTM • Virtual LTM being considered for lab environments • Other datacenters will be consolidated • We use WhiteHat and looking into ASM
  • 8.
    How we loadbalance • Round Robin – Stateless applications virtuals/cloned – until products have issues or need persistence • Dynamic methods – Observered member/node – Depends on the number of pools • Priority Group Activation – Prefer to have at least 3 servers per pool (n+2) – 1 Cron Server, 2 web servers – Weblogic Reverse Proxy 3/6 – WP1 Pools 1/1/1
  • 9.
    Persistence • Universal – iRule, jsessionid • Cookie – Default insert and tried passive • SSL Persistence – when using Client and Server SSL profiles • Source IP – Bad, but we still do it in places (easy)
  • 10.
    iRule Lessons learned •iRule Editor – Now has bigip.conf and bigip_base.conf – Offline iRules • iRule naming convention, versioning – TCP Connection • iRule HTTP Events Flowchart • TCL Errors • Scripted bigpipe iRule changes – bigpipe virtual rule diffs before/after – Version 9 vs. version 10 changes (grep rule) – Postfix to email/page upon differences
  • 11.
    iRules used tosolve problems • .NET/SQL application upgrade split – Using classes, switch glob – Akamai challenges • Company name change/combination – Almost 1000 lines, nested if and switch – Allows URLs to remain hosted on the same servers (3+ versions) • Maintenance Pages – Allow class of IP addresses through for QA validation – Static/dynamic responses and redirects (client name changes) – robots.txt, Google site verification – Graphics/icons with hex conversion • Block/Allow – URL, IP user-agent, HTTP verb, etc. , – Faster and easier than firewall changes with our vendor
  • 12.
    iRules used tosolve problems (cont.) • Referer replace • Server Resource Cloaking – Removing Server headers – BigIP noserver • Apache Killer prevention (range headers) • TS-Edge JavaScript injection • Load Balance Failure • Low-cipher detection • Mobile/iPad application redirect • CAAMS pool switching • AUS Throttling users (using stats profile) • Pool Member Status – From DevCentral (upgrading to Joel Moses’ version)
  • 13.
    iRules and Mmmmcookies • Akamai Cookie – Prevents bypassing Akamai – Secures/restricts resources by IP – Not using Akamai’s site shield, so iRules and Akamai configuration must be in sync • QA Test cookie • eLearning cookie – Validate users – Referring host switch directs to appropriate resource – Allows a single VIP to host all of our environments • Home Cookie Clean • VMS Cookie Crumb Clean
  • 14.
    Other things weare doing with LTM • Compression • WAN/LAN optimization • Reviewing TCP and HTTP profiles for more improvement • Fix slow connectivity with Chrome (bug) • Health Monitors – Receive String – Session creation
  • 15.
    What is ourplan going forward? • Gomez Real User Monitoring – Implement via iRules • Priority for iRules • Splunk • Upgrade to version 11 • iApps/iControls • Implement Partitions? • iRule to show persistence tables • Migrate from bigpipe commands to tmsh • F5 Certification
  • 16.
    Questions? Matthew Leggett Sr. SystemsEngineer – Availability matthew.leggett@peoplefluent.com

Editor's Notes

  • #7 So who uses Peoplefluent solutions?