ICYMI on DevCentral - April 2022

DevCentral publishes a ton of content each month and it's easy for articles/videos/forum posts to get lost on the timeline. Here's a snapshot of the top posts and videos from April 2022, in case you missed it! 

Solved on the Technical Forum

• /var full with accepted solutions from Lidev @ and Sebastiansierra 
• LTM Local traffic policy to many options!!! - Help needed! with an accepted solution from Mayur_Sutare 
• HTTP Header insert with an accepted solution from Enes_Afsin_Al 
• Request client cert auth based on URL with an accepted solution from spalande 
• I am adding a custom http header but how to print it out using irules? by David_M  who ended up solving this problem for himself. 🙂

Huge thanks to everyone who offered solutions on the Technical Forum! We love to see folks helping each other solve problems and answer questions. 

F5 Technical Articles:

• Cisco ACI Endpoint Learning with a BIG-IP HA Failover by Eric_Ji who shared  lessons learned to guide the design and troubleshooting of the BIG-IP HA and failover with Cisco Application Centric Infrastructure (ACI).
• Protect Applications from Spring4Shell. (CVE-2022-22965) by warburtr0n on how to protect from the Spring4Shell vulerabilities.
• High Availability in a Bare Metal World by Greg_Coward provides guidance for deploying a highly available and scalable application delivery infrastructure on top of Equinix Metal utilizing either VMWare or KVM hypervisors.
• AFM Protocol Custom Signatures for Spring4Shell and Spring_Cloud (CVE-2022-22963 and -22965) by James_Affeld on using AFM Protocol Inspection to detect exploits.
• Configuring BIG-IP AFM firewall policies and rules with Ansible by Leon_Seng who demonstrates a sample workflow of building up the automation of AFM firewall policy configuration using Ansible.
• How to Use F5 Distributed Cloud to Obfuscate Ingress and Egress Traffic by MichaelatF5 navigates government compliace with Cyber Liability Insurance and how to obfuscate ingress and egress traffic.

If you've got suggestions for Technical Articles, drop them below in the comments. The DevCentral team can try and track down a SME to write on that topic. 

Demos and Livestreams

RomanJ explains how to use Ansible and BIG-IQ to automate steps to cleanup a BIG-IP and remove unused/expired certificates and keys: 

JRahm walks through a proof of concept for automating captures, and a road map to take that ground work and expand your capture horizons.