TACKLING BIG-IP BLUE-GREEN DEPLOYMENTS IN PRIVATE CLOUD USING F5 & VMWARE ANSIBLE MODULES Eric McLeroy, Payal Singh, Sr. Specialist Solutions Architect, Principal Solution Engineer, Ansible by Red Hat F5 Networks eric.mcleroy@redhat.com payal.singh@f5.com 1
AGENDA • Networking automation use cases • F5 BIG-IP: Introduction • Blue green deployment use case • Demo • Playbook walkthrough
TOP 3 F5 BIG-IP AND ANSIBLE USE CASES 1) Gather facts Allows gathering of information about your environment 2) Making changes Provides the ability to make small changes as needed 3) Scaling out Provides the ability to launch entire applications stacks 3
BIG-IP INTRODUCTION 4
F5 INTRODUCTION Data Center Load Balancing DDoS Protection Devices Firewall Internet BIG-IP BIG-IP Local Traffic Manager LTM BIG-IP Access Policy Manager APM 5 ASM BIG-IP Application Security Manager
RECAP Previous Webinars • Automate BIG-IP in customer environments using Ansible • Basic F5 playbook • Ansible F5 modules • Fast application deployment and customer use case with Ansible and F5 BIG-IP • Onboarding • Using iApps to deploy configuration on BIG-IP • WWT: BUILDING A F5 SOLUTION WITH ANSIBLE TOWER • Using Tower to configure the BIG-IP 6
F5 AND ANSIBLE SOLUTION 7
F5 and Ansible Solution Private cloud Ansible Versions 2.3 + 1 2 bigsuds, f5-sdk F5 Virtual BIG-IP Platform F5 Editions Playbooks VIPRION REST/SOAP API calls TMOS v12.X + 3 Public cloud Ansible Host DNS LTM Amazon Web Microsof Google Cloud Services t Azure Platform F5 Ansible Modules officially supported : https://f5.com/support/support-policies
BLUE GREEN DEPLOYMENTS 9
BLUE GREEN DEPLOYMENTS 100% Blue Environment Users ADC Green Environment
USE F5 BIG-IP DNS Data Center 1 LTM VIP visibility into BIG-IP DNS BIG-IP LTM Devices/Users Servers BIG-IP Data Center 2 Global Load Balancing Geographic load balancing Infrastructure Monitoring BIG-IP LTM Servers
HOW IT WORKS LTM1 Virtual IP Wide IP Pool of Servers Members (my-wide-ip.example.com VIP down OR Pool down Pool ) Users 100% LTM2 Virtual IP Pool of Servers LTM BIG-IP BIG-IP
DEMO 1) PROVISION AND LICENSE A VIRTUAL BIG-IP ‘LTM2’ IN VMWARE 2) SWITCH TRAFFIC FROM ‘LTM1’ TO ‘LTM2’ 13
Demo Part1 Develop an automated workflow to provision, license and configure a BIG-IP in a vCenter VMware environment Reconfigure the Grab the VM IP Spin up BIG-IP in vCenter 1 network adaptor assigned by DHCP to * BIG-IP VE template is created on vcenter settings the BIG-IP VE Playbook BIG-IP LTM2 Ansible Provision the BIG-IP Onboard the BIG-IP Tower License the BIG-IP VE with ASM module (Hostname/NTP/DNS/SSHD) 2 Network the BIG-IP Import and activate Add pool members and pool (VLAN/Self-IP) the ASM policy Add virtual server and attach the ASM policy to it
DEMO PART1: VIDEO AND PLAYBOOK WALKTHROUGH 15
Demo Part2 Steps: • Setup connectivity between LTM2 and DNS MGMT IP – 10.192.73.219 • Add LTM2 to DNS WideIP pool Self-IP – 10.168.68.100 BIG-IP • For traffic switch: Disable the virtual server on LTM1 Listener Virtual IP – 10.168.68.101 (53) Data Center Setup complete with DNS Connectivity to be setup with DNS BIG-IP LTM1 VE BIG-IP LTM2 VE MGMT IP – 10.192.73.246 MGMT IP – 10.192.73.218 Self-IP – 10.168.68.5 Self-IP – 10.168.68.10 Virtual IP – 10.168.68.12 Virtual IP – 10.168.68.11
DEMO PART2: VIDEO AND PLAYBOOK WALKTHROUGH 17
Alternative Solutions If a Static MGMT IP needs to be assigned to the BIG-IP instead of using DHCP for MGMT IP (BIG-IP Version 13.1+) 1) Edit the OVA file using a tool like COT (Common OVF Tool) cot edit-properties <source filename>.ova -p net.mgmt.addr=""+string -p net.mgmt.gw=""+string –p user.root.pwd=""+string -p user.admin.pwd=""+string -u -o <destination filename>.ova 2) Edit the OVA (template) properties so that when you deploy BIG-IP VE, you can specify values for the management IP address and default passwords. Example snippet 3) Use an Ansible playbook to execute deploying the OVA file (Step 2) https://github.com/f5rstahl/simple-ansible-playbook https://github.com/payalsin/f5-ansible/tree/master/playbooks/spinup-demo/static
Alternative Solutions BIG-IQ to be used for licensing BIG-IP Playbook Private/Public cloud License Ansible BIG-IQ F5 Virtual BIG-IP Platform F5 Editions Tower VIPRION Sample Playbook https://github.com/payalsin/f5-ansible/tree/master/playbooks/spinup-demo/big-iq
GET STARTED 20
WHERE DO I BEGIN Automation is not a tool It’s a strategy, it’s a journey - Learn automation practices Super NetOps training courses can - help Join existing Ansible network - automation communities Start small… Create Playbooks that read or check - only Create simple jobs that eliminate the - annoying network tasks 21
BIG-IP on Ansible Galaxy MORE WORKFLOWS Please contribute.. Your BIG-IP roles for community! https://galaxy.ansible.com/list#/roles?page=1&page_size=10&autocomplete=bigip https://galaxy.ansible.com/payalsin/bigip-ansible-ha-setup/ 22
FAQ Where can I learn more about Ansible & F5 www.ansible.com/f5 What is in the roadmap “ More modules ” in general using YOUR inputs: – https://github.com/F5Networks/f5-ansible/projects – What do I do if I have an issue with an existing F5 module Open an GitHub issue : https://github.com/F5Networks/f5-ansible/issues – I love it - I want to try out Ansible-Tower www.ansible.com/tower-trial/ – Email: gettingstarted@ansible.com – Email: devops@f5.com 23
REFERENCES Get started on your automation journey: www.f5.com/supernetops • Learn more about solution: (webinars, modules, blogs) www.ansible.com/f5 – Solution Overview: https://www.f5.com/pdf/solution-center/f5-ansible-overview.pdf • Whitepaper: https://f5.com/Portals/1/PDF/Partners/automating-f5-big-ip-platform-with-ansible.pdf – Current F5 modules in Ansible core: http://docs.ansible.com/ansible/list_of_network_modules.html#f5 – Request feature-enhancements: https://github.com/F5Networks/f5-ansible/issues – Download Current Ansible (2.6): http://releases.ansible.com/ansible/ – 24
REFERENCES Blue-Green deployment https://github.com/payalsin/f5-ansible/tree/master/playbooks/spinup-demo • Static IP assignment https://devcentral.f5.com/articles/ve-on-vmware-part-1-custom-properties-29787 • https://devcentral.f5.com/articles/ve-on-vmware-part-2-ansible-deployment-29790 • https://github.com/f5rstahl/simple-ansible-playbook • https://github.com/F5Networks/f5-vmware-vcenter-templates • https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-ve-setup-vmware-esx • i-13-1-0/3.html BIG-IQ licensing https://github.com/payalsin/f5-ansible/tree/master/playbooks/spinup-demo/big-iq • 25
THANK YOU 26
Recommend
More recommend
