Sanjay Shitole, Principle Solutions Engineer

Transcription

1

2 Sanjay Shitole, Principle Solutions Engineer

3 Ansible, Terraform, Puppet

4 Customer Feedback AUTOMATE, AUTOMATE, AUTOMATE! CICD Reap Early Benefits Fix Issues quicker React to Opportunities

5 My application needs SSL encryption and availability

6

7

8 What we can do with Automation?

9 Public Cloud x100 BIG-IP VE Provisioning Tool Onboard F5 BIG-IP in Private / Public Cloud Private Data Center x1000 BIG-IP devices

10 Build BIG-IP LTM policies & deploy across multiple environments with consistency BIG-IP devices Deploy ASM/APM/AFM polices using iapps Development environment Forgetting, or missing, a device when patching or deploying secure config could expose your corporation to attackers both internal and external. Admin Provisioning ToolSecurity Policy Test environment iapps Production environment Manage & deploy security policies consistently across your infrastructure or for your tenants

11 Automate routing traffic & connection termination by managing LTM and BIG-IP DNS configurations Upgrade/Deploy new applications on the BIG-IP consistently & with low risk BIG-IP Data Center 1 Data Center 2 Manage Blue-Green deployments during applications roll up for zero down time

12 Cloud Migration Provision & Automate BIG-IP infrastructure& configurations in VMware, OpenStack, AWS, Azure Using CFT, HEAT templates and so on An application can begin in VMware environment but expand to AWS & Azure. Orchestrate & Automate in multiple private & public cloud environments

13 F5 & Ansible

14 Easy to install Agentless Playbooks use YAML REST/SOAP API calls Versions 12.X + 3 Ansible host BIG-IP Platform other

15 1 Versions REST/SOAP API calls FACTS BIG-IP VE Versions 12.X + 3 Ansible host BIG-IP Platform 2 Bigsuds, f5-sdk other

16

17 Name of Task Name of Ansible module {{ myvirtualserver_ipaddress }} Parameters

18 from GitHub/F5 Downloads - name: Get iapp from Github get_url: url: dest: /var/tmp validate_certs: False Input/Parameters provided as JSON payload 1. Grab template 2. Upload iapp to BIG-IP 3. Deploy Application - name: Add iapp template bigip_iapp_template: server: ((inventory_hostname}}" user: admin" password: admin" content: "{{ lookup('file', '/var/tmp/appsvcs_integration_v tmpl') }}" state: "present" validate_certs: False delegate_to: localhost - name: Deploy iapp bigip_iapp_service: name: HTTPApp" template: <<template_name>>" parameters: "{{ lookup('file', <<payload.json file>>') }}" server: ((inventory_hostname}} user: "admin" password: "admin" state: "present" delegate_to: localhost

19 SaaS & Multi-tenancy Introduction Use Case:

20 Introduction Use Case

21 Introduction Use Case

22 Introduction Use Case

23 F5 & Terraform

24 Repository AWS Google Cloud Terraform VMware Digital Ocean Download F5 Provider Binary from Github Download terraform 1 2 Google Cloud DevOPs Workstation F5 Provider Plugin AWS F5 Terraform VMware Digital Ocean

25

26

27

28

29 Use Terraform as part of infrastructure as code initiative Deploy F5 in AWS & manage the configuration using Terraform Deploy F5 configurations from repository using terraform. Looking to leverage Terraform for auto scaling and automating development environments

30 F5 & Puppet

31 F5 BIG-IP Has GEM resource files to communicate and configure BIG-IP Ruby SDK to make rest calls 2017 F5 Networks Puppet Forge:

32 Configure iapp on BIG-IP device Modify Manifest parameters for other BIG-IP devices Use FACTER_url Puppet command to get Manifest (DSL format) Deploy modified Manifest through Puppet

33 Introduction Use Case

34

35

36 Ansible information Ansible feature requests or issues Puppet Forge Terraform Providers F5 DevCentral

37 Give Feedback Get Points! Survey will pop up in Mobile App. Answer the multiple choice. Submit your question to complete. Receive 5 points! Follow us on Twitter and use the #F5Agility17 hashtag!