Turn your consistent Application Services into Code · 2018. 6. 28. · iRules Application...

Turn your consistent Application Services

into Code

Gert Jan Wolfis

THEN NOWDATA CENTERS & SERVERS CLOUDS & CONTAINERS

3

App architecture is changing

THEN

MONOLITHIC MICROSERVICES & APIs

NOW

Key Products

Automation

Service Creation Time

Service Lifetime

Data Centre Provides

Generation 1Virtualised

Generation 2Cloud

Generation 3Resource Pool

Virtualisedserver running

single service/app

Self-serve virtualisedserver running

single service/app

Pools of CPU, memory, storage + PaaS Framework

Little Mixed 100%

Days/Ticket Minutes/Self-Serve+ Autoscale Sub-second

Years Months/Years Hours/Mins/Secs

VMware, Xen,BIG-IP VE

AWS, OpenStack, Cisco ACI

Containers: Mesos, Docker, Kubernetes

GUI

(Image Source: accessdefense.com)

© 2017 F5 Networks7

•••

•

© 2017 F5 Networks8

•••

• Continuous improvement

• culture

9

•

•

•

•

11

AUTOMATION

Node.js, Python,Dev tool-chains,

Declarative interfaces

A VERY Long Way

Mouse / Keyboard

AUTOMATION

Enablement

© 2017 F5 Networks15

•

•

•

•

•

© 2016 F5 Networks16

••

•

© 2016 F5 Networks17

© 2016 F5 Networks18

••

Appropriate abstraction enablesDeclarative Interfaces

My application needs SSL encryption and

availability

Application Owner Service Portal

Automation

Automation

Orchestration

Templates provides:• L4-7 Configuration Abstraction• Full platform capability• Site-specific customization

Resulting in:• Faster time to value• Faster time to change• Reduced operation risk

Admin

Templates

Templates allow admins to templatize application service configurations on a per application basisSimplify and standardize complex virtual server deployment

Application Experience: Performance, High-

Availability, and Security

RouterSwitch

L2 – L3

L4 – L7

Network

Application ServicesPolicy

ACCESS & IDENTITY FIREWALL CONTEXT

LOAD-BALANCING

GATEWAY SERVICES SECURITY

OPTIMIZ-ATION

DDoS PROTECTIONMOBILITY

Declarative Orchestration

Azure

Service Catalog

HTTP Simple

HTTPS Advanced

Application Security

Other…

Application Experience: Performance, High-

Availability, and Security

RouterSwitch

L2 – L3

ADC ADC

L4 – L7

ADC

Network

Application Services

ACCESS & IDENTITY FIREWALL CONTEXT

LOAD-BALANCING

GATEWAY SERVICES SECURITY

OPTIMIZ-ATION

DDoS PROTECTIONMOBILITY

Template

Pool Member

Virtual Server

Template

Virtual ServerPool

Without With

Pool MemberPool

Administrative work as Roles

25

ONBOARDING

HOSTNAMENTPDNS SELF-IP VLANROUTE DOMAIN

NETWORKING

Application Readiness

ProvisionModules

Run BIG-IP commands

UploadiRules

Application deployment

Template

F5 GitHub Account with 37 repositories supported by F5

F5 is a Highly Programmable Platform (REST API) with Automation Partnerships to be integrated within a CI/CD Pipeline

••

Established IT Emerging/DevOps IT

5

SCHEDULER

MANAGER NODE

CONTAINER CLUSTER

WORKER NODE

WORKER NODE

CC

1. Cluster scheduler starts 4 instances of the triangle app.

2. The scheduler notifies the Container Connector (CC) that 4 instances of the triangle app have started.

3. The F5 CC programs the BIG-IP via iControl Rest and creates a virtual server for the triangle app and a pool with 4 members.

4. Client makes a request for triangle app to the BIG-IP.

5. BIG-IP load balances the request across the 4 instances of the triangle app in the container cluster.

Data Plane

Control Plane

KEY

2

ADC

3

4

1

Free self-service training programf5.com/supernetops

AUTOMATION

Enablement Educate