Sanjay Shitole, Principle Solutions Engineer

Sanjay Shitole, Principle Solutions Engineer

Ansible, Terraform, Puppet

Customer Feedback AUTOMATE, AUTOMATE, AUTOMATE! CICD Reap Early Benefits Fix Issues quicker React to Opportunities

My application needs SSL encryption and availability

What we can do with Automation?

Public Cloud x100 BIG-IP VE Provisioning Tool Onboard F5 BIG-IP in Private / Public Cloud Private Data Center x1000 BIG-IP devices

Build BIG-IP LTM policies & deploy across multiple environments with consistency BIG-IP devices Deploy ASM/APM/AFM polices using iapps Development environment Forgetting, or missing, a device when patching or deploying secure config could expose your corporation to attackers both internal and external. Admin Provisioning ToolSecurity Policy Test environment iapps Production environment Manage & deploy security policies consistently across your infrastructure or for your tenants

Automate routing traffic & connection termination by managing LTM and BIG-IP DNS configurations Upgrade/Deploy new applications on the BIG-IP consistently & with low risk BIG-IP Data Center 1 Data Center 2 Manage Blue-Green deployments during applications roll up for zero down time

Cloud Migration Provision & Automate BIG-IP infrastructure& configurations in VMware, OpenStack, AWS, Azure Using CFT, HEAT templates and so on An application can begin in VMware environment but expand to AWS & Azure. Orchestrate & Automate in multiple private & public cloud environments

F5 & Ansible

Easy to install Agentless Playbooks use YAML REST/SOAP API calls Versions 12.X + 3 Ansible host BIG-IP Platform other

1 Versions 2.2 + REST/SOAP API calls FACTS BIG-IP VE Versions 12.X + 3 Ansible host BIG-IP Platform 2 Bigsuds, f5-sdk other

Name of Task Name of Ansible module {{ myvirtualserver_ipaddress }} Parameters

from GitHub/F5 Downloads - name: Get iapp from Github get_url: url: https://github.com/f5networks/f5-application-services-integrationiapp/releases/download/v2.0.003/appsvcs_integration_v2.0.003.tmpl dest: /var/tmp validate_certs: False Input/Parameters provided as JSON payload 1. Grab template 2. Upload iapp to BIG-IP 3. Deploy Application - name: Add iapp template bigip_iapp_template: server: ((inventory_hostname}}" user: admin" password: admin" content: "{{ lookup('file', '/var/tmp/appsvcs_integration_v2.0.003.tmpl') }}" state: "present" validate_certs: False delegate_to: localhost - name: Deploy iapp bigip_iapp_service: name: HTTPApp" template: <<template_name>>" parameters: "{{ lookup('file', <<payload.json file>>') }}" server: ((inventory_hostname}} user: "admin" password: "admin" state: "present" delegate_to: localhost

SaaS & Multi-tenancy Introduction Use Case:

Introduction Use Case

Introduction Use Case

Introduction Use Case

F5 & Terraform

Repository AWS Google Cloud Terraform 0.8.1 VMware Digital Ocean Download F5 Provider Binary from Github Download terraform 1 2 Google Cloud DevOPs Workstation F5 Provider Plugin AWS F5 Terraform 0.8.1 VMware Digital Ocean

Use Terraform as part of infrastructure as code initiative Deploy F5 in AWS & manage the configuration using Terraform Deploy F5 configurations from repository using terraform. Looking to leverage Terraform for auto scaling and automating development environments

F5 & Puppet

F5 BIG-IP Has GEM resource files to communicate and configure BIG-IP Ruby SDK to make rest calls 2017 F5 Networks Puppet Forge: https://forge.puppet.com/puppetlabs/f5

Configure iapp on BIG-IP device Modify Manifest parameters for other BIG-IP devices Use FACTER_url Puppet command to get Manifest (DSL format) Deploy modified Manifest through Puppet

Introduction Use Case

Ansible information www.ansible.com/f5 Ansible feature requests or issues https://github.com/f5networks/f5-ansible/issues Puppet Forge https://forge.puppet.com/puppetlabs/f5 Terraform Providers https://www.terraform.io/ https://github.com/scshitole/terraform-provider-bigip F5 DevCentral https://devcentral.f5.com

Give Feedback Get Points! Survey will pop up in Mobile App. Answer the multiple choice. Submit your question to complete. Receive 5 points! Follow us on Twitter and use the #F5Agility17 hashtag!