We re the Cloud Solutions Team

Size: px

Start display at page:

Download "We re the Cloud Solutions Team"

Julius Chandler
5 years ago
Views:

2 PRESENTED BY:

3 We re the Cloud Solutions Team Since 2013, making BIG-IP configuration easier with products like: 40+ supported iapp templates 40+ cloud-formation templates 60+ Ansible modules

5 Automation, Orchestration, Programmability, Extensibility Make it faster and easier for customers to deploy and consume BIG-IP application services via declarative interfaces. Deliver automation and orchestration capabilities to simplify and accelerate application service deployments in multi-cloud environments. Enable programmable extensibility to empower customers to extend capabilities, integrate with 3 rd -party systems, and solve unforeseen problems.

6 6 Imperative: Tell the system HOW to do something, and as a result WHAT you want to happen. to Declarative: Tell the system WHAT you would like happen, and let it figure out HOW to do it. Imperative Focus: HOW to reach a desired end-state Step-by-step specific & ordered instructions Requires domain-specific knowledge Maximizes flexibility at the cost of extra complexity Infinite deployment options Not reusable in many cases Usually not idempotent Attractive to NetOps Declarative Focus: WHAT the end state needs to be Single step instruction Minimizes need for domain-specific knowledge Reduced flexibility and reduced complexity Finite packaged deployment options JSON document approach enables reusability Easier to make idempotent Attractive to DevOps

7 F5 icontrol LX Extension (Node.js) not a TCL iapp Provides declarative interfaces for common L4-L7 App Services use cases Deployments via a single REST API endpoint* JSON-based document with defaults included Supports multi-tenancy Atomic transactions (all or nothing) Supports multiple application types Minimizes need for BIG-IP domain knowledge Minimizes deployment errors and maximizes deployment consistency TMOS-independent RPM package Available now & supported: Example Services: Declarative API HTTP SSL Offload URL Routing User Tenant-1 App-1 App-2 App-N App Services 3 Extension HTTP(s) w/ WAF Fast L4 TCP/UDP Tenant-X App-1 App-2 App-N

9 A declarative API for configuring apps using JSON An icontrol LX extension (NodeJS) Based on the original intent of the App Svcs iapp Client Declaration AS3 Parser Validated Declaration AS3 Auditor icontrol BIG-IP

10 TMSH tmsh create ltm pool xyz members add { :8080 {... tmsh create ltm profile http x-forwarded-for enabled... tmsh create ltm virtual abc pool xyz profiles add {... tmsh... tmsh... icontrol-rest curl -k -u admin:admin -H "Content-Type: \ application/json" -X POST -d \ '{"name":"tcp-pool","members":[ \ {"name":" :8080","description":"first member }, \ {"name":" :8080","description":"second member } ] }' \ curl... curl... curl... Terraform in AWS resource "aws_alb_target_group" "test" { name = "tf-example-ecs-ghost" port = 8080 protocol = "HTTP" vpc_id = "${aws_vpc.main.id}" } resource "aws_alb" "main" { name = "tf-example-alb-ecs" subnets = ["${aws_subnet.main.*.id}"] security_groups = ["${aws_security_group.lb_sg.id}"] } resource "aws_alb_listener" "front_end" { load_balancer_arn = "${aws_alb.main.id}" port = "80" protocol = "HTTP" default_action { target_group_arn = "${aws_alb_target_group.test.id}" type = "forward" } }

11 Demo: Posting an AS3 Declaration Configure an application in 1 post One Declarative Statement AS3 Many Imperative Commands BIG-IP

12 Our Automation Value Proposition The most feature-rich, programmable proxy on the planet A delightful DevOps-centric user experience because APIs shouldn t hurt Supported, sustainable, costefficient solutions that stand the test of time Simple, lightweight integrations with anyone, anywhere People are your best asset; lets transform their careers so they can collaborate '

13 API Contract A well-designed, versioned schema Backwards-compatible without exception A delightful DevOps-centric user experience because APIs shouldn t hurt Declarative Interface Fewer interactions = less integration hassle Straightforward API = less integration cost Less cost and hassle = happiness

14 Built-In Support Self-test and troubleshooting tools included Direct Bug/RFE Reporting Customer feedback accepted via Github Issues Supported, sustainable, costefficient solutions that stand the test of time Automated Doc Publishing Updates by pull request from the field Tool chain that publishes in 10 minutes Over 70 pages of instructions and examples made available on initial release day (April 30)

15 Simple, lightweight integrations with anyone, anywhere Our ecosystem:

17 Base Config (as-shipped) User Config (imperative) AS3 Config for Tenant1 AS3 Config for Tenant2

18 Use industry terminology Examples: WAF, not ASM Multiplex, not OneConnect Follow standards Examples: IETF draft-handrews JSON Schema IETF RFC 6902 JSON Patch

19 POST GET PATCH DELETE 1 URI, 4 Methods. Keep It Simple, Sam.

21 Postman

22 Postman Curl Ansible

23 Postman Curl Ansible On Container

24 Postman Curl Ansible On Container On BIG-IQ (soon)

25 Demo: Service Discovery AS3 + API Services Gateway Container directing traffic to tagged servers in the cloud One Declarative Statement AS3 Many Imperative Commands BIG-IP

BIG-IP Virtual Edition BIG-IP SSG Summer 2018 Fall 2018

26 AS3 Everywhere Deploy with Consistent API AS3 AS3 AS3 AS3 BIG-IP Platform BIG-IP Virtual Edition BIG-IP Platform BIG-IP Virtual Edition BIG-IP SSG Summer 2018 Fall 2018 On BIG-IP In Cloud w/service Discovery On Container On BIG-IQ

27 OLD Console-based config GUI-based app config Backup with UCS Upgrade with.iso NEW Declarative API-based onboarding (CFT) Declarative API-based app config (AS3) Config off-box in source control Upgrade with new instances and A/B or blue/green introduction

28 Contact Information Fred Slater Kat Austria

29 Useful Links REDtalks Github Integration Demo AS3 Repository Download Bugs or Requests General Documentation Schema Reference Declaration Examples JSON Schema Standard JSON Patch Standard

F5 Programmability Training

F5 Programmability Training Release 2.0 https://github.com/f5devcentral/f5-automation-labs/graphs/contrib Nov 01, 2017 Contents: 1 Welcome 1 2 Getting Started 3 3 Lab Topology 5 4 Class 1 - Introduction