Forum Discussion

nada_nope's avatar
nada_nope
Icon for Nimbostratus rankNimbostratus
May 01, 2023

Need to merge two access policies established through the visual policy editor.

Using F5 BIG-IP Virtual Edition Version: 15.1.5.1 Build 0.0.14 According to my technical lead, F5 recommends that people move away from using F5 iRules and place everything in an access policy usi...
cloud
devops
security
nada_nope's avatar
nada_nope
Icon for Nimbostratus rankNimbostratus
May 11, 2023

Thanks for the reply Aubrey. As a user, I find orienting on best practices before getting in too deep helps.

Though I am currently being directed to discard infrastructure as code (IaC), I favor an IaC approach over the visual policy editor.  So I have been examining the tooling around setting up the F5 BIG-IP. There are a lot of solutions using Ansible to set-up the load balancer. Then there is the current discussion of using a declarative model vs using an imperative model. It's my understanding that F5 is creating a movement toward the declarative model through tooling such as the application services 3 (AS3) extension whereas historically it has been an imperative model. If you have time, I would love to hear your opinion on this.

  • AubreyKingF5's avatar
    AubreyKingF5
    Icon for Moderator rankModerator
    May 22, 2023

    I think F5 is definitely moving to declarative. You see that with AS3, for sure, but you also see it with our more modern software in the Distributed Cloud (F5 XC) with more open standards than AS3. Unfortunately, there has not been enough APM added to the Distributed Cloud yet, but I'm sure it'll get there.. and it'll be Declarative all the way.

    One thing people may not have largely realized is that last year, F5 became the first sizable tech company - ever - to transition succesfully from a hardware to a software company. According to our annual shareholders call at the end of last fiscal year, >50% of our revenue was software. Some might think, "well.. that's all specialized software for your hardware, right?" No. We have already ported our WAF engine to all platforms in the portfolio - VIPRION, BIG-IP, VE, NGINX+ and F5 XC. Rest assured we will be looking to port all of our software across all of our platforms.

    To do this, we need to be 100% Declarative. That's my take, as an F5 fan.