TACKLING BIG-IP BLUE-GREEN DEPLOYMENTS IN PRIVATE CLOUD USING F5 & VMWARE ANSIBLE MODULES

Transcription

1 TACKLING BIG-IP BLUE-GREEN DEPLOYMENTS IN PRIVATE CLOUD USING F5 & VMWARE ANSIBLE MODULES Eric McLeroy, Sr. Specialist Solutions Architect, Ansible by Red Hat Payal Singh, Principal Solution Engineer, F5 Networks 1

2 AGENDA Networking automation use cases F5 BIG-IP: Introduction Blue green deployment use case Demo Playbook walkthrough

3 TOP 3 F5 BIG-IP AND ANSIBLE USE CASES 1) Gather facts Allows gathering of information about your environment 2) Making changes Provides the ability to make small changes as needed 3) Scaling out Provides the ability to launch entire applications stacks

4 4 BIG-IP INTRODUCTION

5 F5 INTRODUCTION Data Center Devices Internet Load Balancing DDoS Protection Firewall BIG-IP LTM APM ASM BIG-IP Local Traffic Manager BIG-IP Access Policy Manager BIG-IP Application Security Manager

6 RECAP Previous Webinars Automate BIG-IP in customer environments using Ansible Basic F5 playbook Ansible F5 modules Fast application deployment and customer use case with Ansible and F5 BIG-IP Onboarding Using iapps to deploy configuration on BIG-IP WWT: BUILDING A F5 SOLUTION WITH ANSIBLE TOWER Using Tower to configure the BIG-IP

7 7 F5 AND ANSIBLE SOLUTION

8 F5 and Ansible Solution 1 Ansible Versions Private cloud 2 bigsuds, f5-sdk Playbooks REST/SOAP API calls F5 Virtual Editions BIG-IP Platform F5 VIPRION 3 TMOS v12.x + Ansible Host Public cloud LTM DNS Amazon Web Services Microsof t Azure Google Cloud Platform F5 Ansible Modules officially supported :

9 9 BLUE GREEN DEPLOYMENTS

10 BLUE GREEN DEPLOYMENTS 100% Blue Environment Users ADC Green Environment

11 USE F5 BIG-IP DNS LTM VIP visibility into BIG-IP DNS Data Center 1 Devices/Users BIG-IP LTM Servers BIG-IP Data Center 2 Global Load Balancing Geographic load balancing Infrastructure Monitoring BIG-IP LTM Servers

12 HOW IT WORKS LTM1 Virtual IP Users Wide IP (my-wide-ip.example.com ) Pool Members 100% VIP down OR Pool down LTM2 Virtual IP Pool of Servers Pool of Servers LTM BIG-IP BIG-IP

13 DEMO 1) PROVISION AND LICENSE A VIRTUAL BIG-IP LTM2 IN VMWARE 2) SWITCH TRAFFIC FROM LTM1 TO LTM2 13

14 Demo Part1 Develop an automated workflow to provision, license and configure a BIG-IP in a VMware environment vcenter Playbook 1 Spin up BIG-IP in vcenter * BIG-IP VE template is created on vcenter Reconfigure the network adaptor settings Grab the VM IP assigned by DHCP to the BIG-IP VE Ansible Tower BIG-IP LTM2 License the BIG-IP VE Provision the BIG-IP with ASM module Onboard the BIG-IP (Hostname/NTP/DNS/SSHD) 2 Network the BIG-IP (VLAN/Self-IP) Import and activate the ASM policy Add pool members and pool Add virtual server and attach the ASM policy to it

15 15 DEMO PART1: VIDEO AND PLAYBOOK WALKTHROUGH

16 Demo Part2 Steps: Setup connectivity between LTM2 and DNS Add LTM2 to DNS WideIP pool For traffic switch: Disable the virtual server on LTM1 BIG-IP MGMT IP Self-IP Listener Virtual IP (53) Setup complete with DNS Data Center Connectivity to be setup with DNS BIG-IP LTM1 VE MGMT IP Self-IP Virtual IP BIG-IP LTM2 VE MGMT IP Self-IP Virtual IP

17 17 DEMO PART2: VIDEO AND PLAYBOOK WALKTHROUGH

18 Alternative Solutions If a Static MGMT IP needs to be assigned to the BIG-IP instead of using DHCP for MGMT IP (BIG-IP Version 13.1+) 1) Edit the OVA file using a tool like COT (Common OVF Tool) cot edit-properties <source filename>.ova -p net.mgmt.addr=""+string -p net.mgmt.gw=""+string p user.root.pwd=""+string -p user.admin.pwd=""+string -u -o <destination filename>.ova 2) Edit the OVA (template) properties so that when you deploy BIG-IP VE, you can specify values for the management IP address and default passwords. Example snippet 3) Use an Ansible playbook to execute deploying the OVA file (Step 2)

19 Alternative Solutions BIG-IQ to be used for licensing BIG-IP Playbook License Private/Public cloud Ansible Tower BIG-IQ F5 Virtual Editions BIG-IP Platform F5 VIPRION Sample Playbook

20 GET STARTED 20

21 WHERE DO I BEGIN Automation is not a tool - It s a strategy, it s a journey Learn automation practices - Super NetOps training courses can help - Join existing Ansible network automation communities Start small - Create Playbooks that read or check only - Create simple jobs that eliminate the annoying network tasks 21

22 BIG-IP on Ansible Galaxy MORE WORKFLOWS Please contribute.. Your BIG-IP roles for community!

23 FAQ Where can I learn more about Ansible & F5 What is in the roadmap More modules in general using YOUR inputs: What do I do if I have an issue with an existing F5 module Open an GitHub issue: I love it - I want to try out Ansible-Tower gettingstarted@ansible.com devops@f5.com 23

24 REFERENCES Get started on your automation journey: Learn more about solution: (webinars, modules, blogs) Solution Overview: Whitepaper: Current F5 modules in Ansible core: Request feature-enhancements: Download Current Ansible (2.6): 24

25 REFERENCES Blue-Green deployment Static IP assignment i /3.html BIG-IQ licensing 25

26 26 THANK YOU