For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Lightboard Lessons: Zero Touch Application Deployments with Terraform, Consul, and AS3

In this lightboard lesson, I show how you can move from the manual work of traditional app deployments to the automated goodness of zero touch app deployments! This demo solution was shown in a Hash...
Published Nov 11, 2020
Version 1.0
AS3
BIG-IP
Consul
devops
series-f5-and-hashicorp-essentials
terraform
JRahm's avatar
Icon for Admin rankAdmin
Christ Follower, Husband, Father, Technologist. I love community and I especially love THIS community. My background is networking, but I've dabbled in all the F5 iStuff, I'm a recovering Perl guy, and am very much a python enthusiast. Learning alongside all of you in this accelerating industry toward modern apps and architectures.
View Profile
JRahm's avatar
Icon for Admin rankAdmin
Christ Follower, Husband, Father, Technologist. I love community and I especially love THIS community. My background is networking, but I've dabbled in all the F5 iStuff, I'm a recovering Perl guy, and am very much a python enthusiast. Learning alongside all of you in this accelerating industry toward modern apps and architectures.
View Profile
Runo_Førrisdah1's avatar
Runo_Førrisdah1
Icon for Nimbostratus rankNimbostratus
Nov 12, 2020

   

 

First I always enjoy your Lightboard Lessons!

 

Even before CVE-2020-5902 exposing mgmt to the Internet was a bad idea. It's much here I don't understand.

OK, so it's only a DEMO to show case the products. Still I think it would just be a small bump in the road to

include the VPN access in the Terraform setup. AWS provides OpenVPN - that would secure

access(encrypt and reduce exposure) to any MGMT service. It would add more cost for sure - still I think

it would be worth it.

With Route domains added that would enable one to seperate Service and MGMT traffic. It would still be

a one interface service - since you can't really remove the dedicated MGMT interface .

 

My $0.05 cents.

Runo Førrisdahl