Automate and simplify multi cloud complexity with f5 and hashi corp
•Télécharger en tant que PPTX, PDF•
0 j'aime•631 vues
In this session, Lori Mac Vittie, principal technology evangelist at F5 discusses digital transformation and how F5 and HashiCorp are working together to unlock the full potential of the cloud
Recommandé
Recommandé
Contenu connexe
Tendances
Tendances (20)
Similaire à Automate and simplify multi cloud complexity with f5 and hashi corp
Similaire à Automate and simplify multi cloud complexity with f5 and hashi corp (20)
Plus de Mitchell Pronschinske
Plus de Mitchell Pronschinske (20)
Dernier
Dernier (20)
Automate and simplify multi cloud complexity with f5 and hashi corp
- 1. Automate and Simplify Multi- Cloud Complexity with F5 and HashiCorp LORI MAC VITTIE Principal Technology Evangelist – Office of the CTO
- 2. | ©2018 F5 NETWORKS2 OVERWHELMED BY REMOTE WORK OVERWROUGHT BY ATTACKS OVERWORKED BY CHALLENGES OVER
- 3. | ©2018 F5 NETWORKS3 OVERCOME BY FOCUSING ON WHAT MATTERS OVER DevelopersOperations Customers
- 5. | ©2020 F55 MULTI-CLOUD CHALLENGES CONSISTENCY IS KEY Protecting applications from existing and emerging threats 23% Applying consistent security policies across all company applications 24% Migrating apps among clouds/data centers 22%
- 6. | ©2019 F56 Yes, please, I’d like another console and dashboard! - said no IT professional ever
- 7. | ©2020 F57 Application business logic End-user Application services turn applications into user experiences APPLICATION APPLICATION API gateway Web app firewall Ingress controller App / web server Denial of service Anti-fraud & anti-bot Load balancer Secure accessSECURITY DELIVERY Turn applications into digital experiences Connect multi-generation application architectures Deliver across heterogeneous environments
- 8. | ©2020 F58 Application business logic End-user Shared Responsibility DEV & DEVOPS SECOPS 41% of teams are organized by function Cloud and team silos introduce friction into hand-offs Skillsets vary across teams and organizations IT OPS NETOPS 12% 15% 36% 24%
- 9. | ©2020 F59 A Day in the Life of Application Delivery A developer has a new app APP DEVELOPER Register with DNS How long does this process take for your customer? Do I need to file a new ticket? What are the next steps? Ticket submitted for new servers SERVER ADMIN Create VIP Address/App Pool Create general FQDN for accessing new App NETWORK ADMIN Application assigned a new IP address Register each App Server in the Load Balancer What ports are your servers listening on? Are they healthy? Open Northbound Firewall Ports What Ports need to be opened outside of this security zone? Open Southbound Firewall Ports What Ports need to be opened?
- 10. | ©2020 F510 Application business logic End-user Repeatable Deployments with F5 and HashiCorp DEV & DEVOPS SECOPS Shared tools Reduces friction between teams Enables skill sharing IT OPS NETOPS • SELF-SERVICE PROVISION • ON-BOARDING • NETWORK COFIGURATION • POLICY as CODE • APP SERVICE CONFIGURATION • MONITORING
- 11. | ©2020 F511 A developer has a new app F5 infrastructure provisioned and configured with Terraform AS3 polls Consul periodically for changes to active services New Services Registered with Consul and AS3 AS3 Updates BIG-IP with new service and BIG-IP manages connection based on existing policies Automated workflow designed for scale. A New Day in the Life of Application Delivery
- 12. ©2018 F5 NETWORKS12 WITH PROCESSES AND TOOLS OVERCOME COMPLEXITY PROCESSES TOOLS Modernize application needs for scale and repeatability Secure cloud agnostic application service connections to maintain compliance and consistency
- 13. | ©2020 F513 Multi-Cloud Application Services
- 14. | ©2020 F514 Application services that go from code to customer THE F5 SOLUTION LOCAL LOAD BALANCING GLOBAL LOAD BALANCING FIREWALL API MANAGEMENT API GATEWAY WEB APP FIREWALL DDoS + BOT PROTECTION ACCESS MANAGEMENT APPLICATION PERFORMANCE MANAGEMENT WEB/APP SERVER SSL DECRYPTION and ORCHESTRATION CREDENTIAL ENCRYPTION
- 15. | ©2020 F515 Inserted automagically… CLOUD SOLUTION TEMPLATES DECLARATIVE ONBOARDING EXTENSION APP SERVICES 3 EXTENSION TELEMETRY STREAMING EXTENSION Start BIG-IP instances in public and private clouds Initial configuration of BIG-IP instances Deploy classic and advanced application services on BIG-IP using declarative REST APIs Stream telemetry, events, and logs from BIG-IP to various analytics and logging solutions BOOTSTRAP ONBOARD DEPLOY APP SERVICES MONITORING/TELEMETRY
- 16. | ©2020 F516 BIG-IP and Terraform
- 17. | ©2020 F517 BIG-IP and Consul
- 18. | ©2020 F518 Obligatory Diagram: NGINX+ and Consul Automate Discovery Automated Updates Reduce operational burden
- 19. | ©2020 F519 BIG-IP Terminating Gateway for Consul Service Mesh Automate Discovery Secure Connectivity Bridge architectures
- 20. | ©2020 F520 Application business logic End-user Repeatable Scale with F5 and Consul BIG-IP Automated discovery Dynamic updates Always on NGINX+ • Bridge architectures • Automate discovery • Dynamic updates • Automate discovery • Dynamic updates
- 21. | ©2020 F521 F5 and HashiCorp can help you simplify multi-cloud complexity SUMMARY Apps are increasingly important, but the pace of innovation and new architectures are increasing enterprise risk. Comprehensive multi-cloud app services for your diverse application needs, so you can focus on building what matters—your apps. Developers can now easily deploy advanced application services to maintain agility, within guidelines established by NetOps/SecOps. Sophisticated protections against L7 cyberthreats can be applied across the app portfolio, in whatever cloud environment, to minimize risk. Trusted professional services and support can help you succeed in your multi-cloud journey.
- 22. | ©2020 F522 Operations Automate infrastructure provisioning and management Templatize BIG-IP or NGINX network configuration for CI/CD workflows Developers Self provision infrastructure Safely test application against production scenarios Customers Enjoy fast and secure applications and new features OVERCOME MULTI-CLOUD COMPLEXITY
- 23. | ©2020 F523 Where to go next Learn more about partnership and solutions: https://www.f5.com/hashicorp Build standardized app services you can federate globally: https://www.f5.com/solutions/secure-cloud-architecture HashiCorp Cloud Operating Model: https://www.hashicorp.com/cloud-operating-model
Notes de l'éditeur
- When I was in the trenches, being in IT was about knowing technology. How to connect devices, deploy applications, and making sure the printer worked. It wasn’t about understanding processes and people. Today IT is about transforming business so it can succeed in a digital economy. IT is no longer just support for or services to the business. IT is a critical part of the business. That can be stressful, especially when outside forces accelerate that transformation. IT’s stressful for everyone who has had to transition to online everything, and emotions are high, especially when things go wrong.
- The good news is we can get through this by taking it one step at a time. We can step back and focus on what matters –people. Every aspect of technology today is focused on experience. That’s not just for customers, it’s for developers and operators of technology too. Every single person involved interacts with applications on a daily basis to work, relax, to pay their bills, to gather groceries. They only have 24 hours in a day. Their time is valuable. They shouldn’t spend it waiting for an app to respond or an approval to push code or an instance to launch. Time is too valuable to waste. Now, all three of these people are ultimately connected by the code that is developed, delivered, and ultimately consumed whether it lives in this cloud or that cloud or on-premises. If we want to value the time of any of these people, we have to address the challenges impacting the other two. Today we’re going to focus on multi-cloud, because our research tell us that 51% of organizations are operating in two to six different public cloud properties and 97% of them report facing challenges related to that reality. And also because that’s what the title of this session says we have to focus on.
- When we scaled out the business in the past, we did it DC to DC. We duplicated everything – down to the brand of server, router, and switches. Today, we don’t do that. We use the cloud – multiple clouds to be precise – to scale out. But when we do that, we don’t have the control we did with a secondary or tertiary data center. So we don’t duplicate as much. We put together a mini-data center using a variety of hardware, software, and tools.
- It’s that heterogeneity that causes some of our stress. We’re overwhelmed by the number of different systems we need to interact with on a daily basis to do our jobs. The last thing you want – or need – right now is another console, another dashboard, another API, and another tool to complicate your already complicated workflows. This isn’t Pokemon after all. You don’t have to collect them all. But applications need support.
- Applications were not designed or developed with operational functions such as scale, security, and availability in mind these functions – application services - are inserted into the path between the application and its end user during deployment. They provide critical operational and business functions required to ensure a fast, secure user experience. The application services that deliver and secure applications are a heterogeneous mix of commercial, cloud-based, and open source solutions. Each adds complexity with distinct operational consoles, APIs, and policies. The majority (69%) of organizations use 10 or more different application services to scale, secure, and speed up applications. Each environment (cloud) adds complexity when we mix and match application services from multiple sources because each brings its own console, dashboard, and operational model. But from this complexity appears an opportunity to simplify.
- We need to be mindful that application services span the entire IT organization – and into development. Nearly half of IT operates in siloed teams that often rely on manual handoffs and multiple approvals. We need to process experts and diplomats in order to simplify the process.
- Here’s a more concrete example. We can simplify this by reducing the number of handoffs across the workstream. We can increase speed by programmatically managing each transition to enable continuous deployment.
- Reduce complexity by reducing the number of tools and languages used to deploy all the pieces and parts of an application in any environment. Shared tools means shared skills, knowledge, and reduced friction that enables faster time to market and faster time to resolution. Repeatability means the same processes are used again and again, which leads to fewer defects and problems and efficiencies. There’s a reason people gravitate toward older versions of anything – because it’s tried and proven, and the predictability means people can focus on improvements and innovation instead of incident resolution.
- By automating deployment and operations, IT simplifies the complexity of multi-cloud realities and enables everyone across the organization – from developers to operators to customers that ultimately interact via applications.
- Today we’re going to focus on challenges arising from the reality of multi-cloud models, specifically some of the tools to codify repeatable processes that reduce the burden on operations and enable self-service for developers that ultimately produces exceptional customer experiences through applications.
- When I started at F5 we realized that load balancing wasn’t enough. So over the years through acquisitions and organic development, we’ve expanded our capabilities and skill sets across it functions and cloud properties. No matter what your application is or where it’s going to be deployed, you can have a consistent set of services across all your apps, wherever they live. That means fewer dashboards, fewer consoles, and a consistent way to deploy security policies across all applications.
- Automating a single task – like updating a firewall – is pretty easy. But automating entire processes across an entire application is actually pretty hard. We’ve worked hard to make it simpler and that’s why we partner with companies like Hashicorp who also work hard to simplify that complexity. Because we believe automation isn’t worth it unless it’s simple.
- Our integration with Hashicorp starts with a BIG-IP provider for Terraform that enables zero-day provisioning in any cloud property.
- But provisioning is just the first step, and day two operations are an important part of automation. We call this zero-touch app delivery because the integration here is between Consul and BIG-IP. We use Consul service discovery to keep BIG-IP pools updated to ensure the applications and services can automatically scale and are always available. Increase NetOps Productivity 80% of customers say lack of automation is a top pain point. Reduce Risk of Outages Eliminate error prone manual steps through automation. Enable Multi-Cloud Networking Enable organizations to expand application footprints across multiple clouds.
- And let’s not forget that NGINX is a part of F5 and NGINX+ also integrates with Consul Connect to simplify dynamic environments. Consul service discovery capabilities configure and keep current the application resources needed to maintain exceptional customer experiences with availability and performance when NGINX+ is acting as an ingress controller.
- Finally, not every application is modern, cloud-native, or containerized. I’ve written code that’s still running. My mother has written code that’s still running. Trust me, containers weren’t a thing when those apps were developed. Those apps are often core to the business and need to be accessed by new apps. Bridging the existing and the emerging is one of the tasks BIG-IP is well suited to. It can act as a terminating gateway for Consul Service Mesh and ensure security using mTLS. Better yet, it can bridge on-premises (where a lot of those traditional applications reside) and the cloud, where many of modern applications are now deployed. This is an example of simplifying architecture, to take advantage of existing investments while simultaneously enjoying the benefits of modern technology. Because we aren’t just technologists, today, we’re also business analysts understand the hard and soft costs of adopting yet another platform.
- We also believe automation isn’t worth it if it’s not repeatable. Repeatability is another way to reduce complexity by making sure that we’re not duplicating scripts for every application. That’s a maintenance nightmare that isn’t going to make our lives any less stressful. Using tools like
- Our partnership with HashiCorp is wholly focused on reducing the complexity of deploying and operating applications and infrastructure in a multi-cloud world, remotely. We think HashiCorp’s Cloud Operating Model provides a great guide to simplifying operations and enjoying the benefits of automation from day 0 forward. Can we get rid of all the dashboards, consoles, and APIs? No. But we can reduce and simplify deployment and operations and keep your inbox a little lighter and your days at your desk a little shorter.
- It’s a stressful time to be in IT. Digital transformation has been accelerated by forces beyond our control, and we’re being asked to step up beyond technology to become process, people, and business experts. The good news is that you’ve got this. With the right tools and technology, you can simplify multi-cloud complexity and be the IT that delivers exceptional experiences to developers, operators, and ultimately, your customers.