Management and Orchestration with F5 BIG-IQ 4.5. Philippe Bogaerts F5 Networks

Transcription

1 Management and Orchestration with F5 BIG-IQ 4.5 Philippe Bogaerts F5 Networks

2 F5 Synthesis High-Performance Services Fabric Simplified Business Models F5 Networks, Inc 2

3 BIG-IQ in the Synthesis Framework F5 Networks, Inc 3

4 F5 s Management and Orchestration Strategy

5 Evolution of Management at F5 OpenStack System Center Cisco BigPipe tmsh/tcl/ irules SOAP APIs Enterprise Manager OpenView AWS SDN VMware vco/nsx BIG-IQ Cloud computing virtualization F5 Networks, Inc 5

6 F5 BIG-IQ - The Vision VIPRION 2400 BIG-IQ VIPRION Blade B4300 VIPRION Blade B2100 VIPRION 4480 VIPRION 4800 F5 Networks, Inc 6

7 F5 BIG-IQ - The Vision VIPRION 2400 BIG-IQ BIG-IP 6900 BIG-IP 3600 BIG-IP 8900 Series BIG-IP 3900 BIG-IP 1600 BIG-IP Series BIG-IP 4000 Series BIG-IP 2000 Series BIG-IP Series F5 Networks, Inc 7

8 F5 BIG-IQ - The Vision VIPRION 2400 BIG-IQ AWS cloud BIG-IP 3600 OpenStack cloud BIG-IP VMware Virtual Edition ACI cloud F5 Networks, Inc 8

9 F5 BIG-IQ - The Vision BIG-IP ASM BIG-IP AFM BIG-IQ Inventory Monitor Centralized audit and control Role-based access and control Backup and Restore Configure Report F5 Networks, Inc 9

10 BIG-IQ Manage Devices & & Traffic INTELLIGENT FRAMEWORK FOR MANAGING APPLICATION DELIVERY Manage Security BIG IQ Apps Orchestrate Services SINGLE POINT OF INTEGRATION INTO A BROAD ECO-SYSTEM OF ORCHESTRATION PARTNERS F5 Networks, Inc 10

11 Manage Devices & Traffic Manage Devices & Traffic Manage Security Apps Orchestrate Services F5 Networks, Inc 11

12 Data Center Data Center Catalog and Inventory Global Load Balancing Link Load Balancing Deploy Virtual BIG-IPs Backup and Restore Images Configuration File Management Manage Devices & Traffic Central Upgrade Server SSL Certificate Monitoring BIG-IP License Management Utility License Reporting F5 Networks, Inc 12

13 F5 Networks, Inc 13

14 Manage Devices & Traffic Apps Manage Security Orchestrate Services Manage Security F5 Networks, Inc 14

15 Single Pane of Glass Firewall Mngt Role-Based Access Control Central Policy Management Centralized Updates Firewall Audit Log AFM / ASM Compare Policies Configuration Management Manage Security F5 Networks, Inc 15

16 Manage Devices & Traffic Apps Manage Security Orchestrate Services F5 Networks, Inc 16

17 Orchestrating Application Services SDAS iapp Management Elasticity Cloud Bursting License Management Data Center Integration Cloud Connectors SDN controller integration Performance Application Health? Traffic Statistics & Monitoring Visibility Where are your BIG-IPs? Discovery & Health Orchestrate Services F5 Networks, Inc 17

18 F5 Networks, Inc 18

19 Object SDAS: Based Application Networking Based Networking VIRTUAL EXCHANGE POOLS ORACLE MONITORS PROFILES POLICES irules SERVERS VS Pool OWA Monitor ftp Profile OWA Accel HTTP Redirect vpn VS vpn Pool HTTP Monitor 1 HTTP Profile 1 SSO OWA Append intra VS intra Pool HTTP Monitor 1 HTTP Profile 2 intra sccess Weak Encrypt Redirect.com VS.www VS Oracle Monitor ftp Profile Content Type Redirect POP3 Monitor SSL Profile 1 HTTP Throttle SSL Profile 2 F5 Networks, Inc 19

20 BIG-IQ creates a catalog of iapp Templates ORACLE EXCHANGE vpn VS Auto generated.com VS intra VS vpn Pool Auto generated www Pool Data Centers intra Pool Oracle Monitor SSL Profile 2 Auto generated Auto generated HTTP Monitor 1 HTTP Profile 1 HTTP Profile 2 Private or Public Cloud HTTP Profile 2 Weak Encrypt Redirect Auto generated Content Type Redirect ftp Profile Auto generated intra access Auto generated HTTP Throttle Auto generated Auto generated Auto generated F5 Networks, Inc 20

21 BIG-IQ Family of Modules BIG-IQ Framework BIG-IP Devices F5 Networks, Inc 21

22 Manage Devices & Traffic Manage Devices & Traffic Manage Security Apps Orchestrate Services Manage Security Orchestrate Services F5 Networks, Inc 22

23 Manage Devices & Traffic ADC Manage Security Fine Grained RBAC Pool Management Basic LTM Configuration Basic LTM Statistics and Monitoring Orchestrate Services F5 Networks, Inc 23

24 BIG-IQ ADC 4.5 Fine Grained Role-Based Access Control BIG-IQ Custom roles to give flexibility to the user to give access to multiple objects Permissions at Coarse (Device level) to granular (VIPs, Pools) Restricted views to application owners F5 Networks, Inc 24

25 BIG-IQ 4.5 Pool Member Management BIG-IQ Global search to quickly locate Pool members Pool member enable/disable (graceful as well as forced) Self serve workflows for application teams F5 Networks, Inc 25

26 BIG-IQ 4.5 Basic LTM Configuration Complete Import of Basic LTM building blocks (VIPs, Pools, Members, Nodes) BIG-IQ Monitor Advanced LTM objects (irules) Awareness of BIG-IP Clusters Declaring Management Authority Configuration deployment staging and dashboard REST Proxy F5 Networks, Inc 26

27 BIG-IQ ADC 4.5 Basic LTM Statistics and Monitoring BIG-IQ LTM stats for all relevant LTM objects RBAC applies to stats as well Visual correlation with health of the LTM objects, F5 Networks, Inc 27

28 F5 Networks, Inc 28

29 The BIG-IQ Solution BIG-IQ Scalable HA Architecture Appliance or Software Comprehensive APIs Simple Licensing F5 Networks, Inc 29

30 Questions? F5 Networks, Inc 30