DevCentral ICYMI - August 2024
DevCentral publishes new content constantly, and it’s easy to miss the latest from F5’s technical user community with all that turnover. So here’s a monthly round-up of DevCentral news, content, and events—in case you missed it! New and Notable SAVE THE DATE: AppWorld 2025 - Feb 25–27 in Las Vegas! Content Round-Up Security Insights: (Didn't)KnowBe4, (In)Secure Boot, 91Won't, and, of course, CrowdStrike DigiCert DCV issue, Sitting Ducks and more - This Week In Security DEF CON & AMD Sinkclose Windows Critical RCE Vulnerability, Malicious Solana-py, and EDRKillShifter Chrome zero-day fix MS Copilot Log4Shel still being exploited What Are Scrapers and Why Should You Care? - Learn about Scrapers, automated tools designed to extract data from websites and APIs for various purposes, posing significant threats to organizations of all sizes. BIG-IP Next: Installing BIG-IP Next on Nutanix Community Edition - Bring up a BIG-IP Next Central Manager and BIG-IP Next virtual machine in a Nutanix CE environment. Streamlining BIG-IP NEXT Deployments: Automate with CI/CD Pipelines Using Terraform Cloud and GitHub - Any changes made in your GitHub repository automatically trigger Terraform Cloud to deploy the updated configurations to your BIG-IP NEXT instance via the BIG-IP NEXT Central Manager. iRules variables in BIG-IP Next: behavior change - See how iRules behavior will change for BIG-IP Next. F5 Distributed Cloud: F5 Distributed Cloud (XC) Global Applications Load Balancing in Cisco ACI Deploy F5 XC in Cisco ACI to securely deploy and load balance global applications across ACI sites (and public clouds). F5 Distributed Cloud Customer Edge on F5 rSeries – Reference Architecture - See how to deploy a Customer Edge site on F5 rSeries hardware. VIPTest: Rapid Application Testing for F5 Environments - Check out VIPTest - a tool designed as a convenience for anyone considering moving their applications from a different vendor solution (e.g., Citrix NetScaler) to F5. HTTPS Routing based on Client Certificates values with F5 Distributed Cloud - Want to use Client Certificates to authorize and route traffic to different destinations? This article can help you identify how to do it with F5 Distributed Cloud HTTP LB, XFCC, and Header Insert/Remove. NGINX: Automating NGINX Certificate Rotation on AWS - Two ways to connect AWS Secrets Manager and NGINX to help with TLS certificate rotation in a scalable way. Powering Progressive Deployment in Kubernetes with NGINX and Argo Rollouts - Use Argo and NGINX to make your application deployments better and faster in Kubernetes. Announcing F5 NGINX Gateway Fabric 1.3.0 with Tracing, GRPCRoute, and Client Settings - Get the latest on this new update. What is Message Queue Telemetry Transport (MQTT)? How to secure MQTT? - Learn how to use NGINX to secure MQTT. Securing and Scaling Hybrid Apps with F5 NGINX Part 4 - A reference architecture that replicates a Kubernetes cluster with an NGINX Ingress Controller deployment and NGINX Load Balancer with HA (High Availability). BIG-IP: Transparent load balancing in Azure, Part 2 - An advanced configuration of F5 BIG-IP behind Azure LB when running in Active/Standby mode and using the Floating IP option for forwarding traffic. Using Tcl packages in iRules - Learn how to convert Tcl packages to an iRules-compliant procs library. OWASP Tactical Access Defense Series: Broken Function Level Authorization (BFLA) - In this article, we are going through API5 item from OWASP Top 10 API Security risks and exploring F5 BIG-IP Access Policy Manager (APM) as a role in our arsenal. DevCentral Visits Jason Rahm and Aubrey King take on Black Hat 2024 in Las Vegas! Check out their videos from the event floor. Fortifying the flow: safeguarding our water supply from cyber threats - Imagine a world where water no longer flows from your tap. Jason Rahm talks about securing our water supply from a city in the middle of a desert.ICYMI on DevCentral - October 2022
DevCentral publishes a lot of articles and videos each month so it's easy for interesting content to get lost on the timeline. Here's a snapshot of the top viewed articles and videos from October 2022, in case you missed it! Community Articles Community Articles is where the community goes to share knowledge and lessons learned. Check out the articles written by the community in October! Perform out-of-place upgrade of vCMP guests via Ansible-reesekapproach they took to perform an out-of-place upgrade of F5 BIG-IP LTM and F5 BIG-IP DNS vCMP guests from version 12.x to 15.x running on a multi-chassis architecture. WorldTech IT - Who Ya Gonna Call? Scary Hack Story-Austin_Geracitells a spooky story to celebrate Cybersecurity Awareness Month and Halloween. Knowledge sharing: Velos and rSeries basic troubleshooting, logs and commands-Nikoolayy1 shares basic Velos and rSeries troubleshooting tips. F5 AFM/Edge Firewall and the difference between Edge Firewalls and Next-generation Firewalls (NGFW)-Nikoolayy1outlines the difference between Edge Firewalls and Next-Generation Firewalls. F5 Technical Articles The Technical Articles section is a great place to find F5 technical SMEs sharing lessons learned and best practices with the community. Here's some of the most viewed posts from October. If you'd like to see a Technical Article about a topic in particular, please let us know in the comments. Use F5 Distributed Cloud to control Primary and Secondary DNS byDave_Potter Manage F5 BIG-IP Advanced WAF Policies with Terraform (Intro) byFouad_Chmainy A Day in the Life of a Security Engineer from Tel AvivbyLior_Rotkovitch You want Modern Auth … for an app or client that’s stuck in the 2010sbyScheff Zero Trust - Making use of a Powerful Identity Aware Proxy (Hands on lab)by momahdy Videos and Demos Make sure to follow the DevCentral Youtube Channel to get the latest videos. NCS Secure Mesh at GovWare 2022 -F5 Partner, NCS, shows off their new unique solution, NCS Secured Mesh at GovWare 2022 Scary Hack Stories: Know Your Blobs -Fred Wittenberg walks us through terrifying tales of reaching blob limits in your firewall and gives the scoop on how to correct it. Defend Against The Airport DoS Attacks with F5 -You may have seen the global airport DoS attacks on the news. This type of attack is fairly easy to overcome. DevCentral's Aubrey King draws out how F5 Distributed Cloud security un-breaks your application IN MINUTES when under attack like this. This Month In Security with F5 SIRT and F5 Labs for September 2022 -The summary of all pertinent security happenings in and around F5 for the month of September. DevCentral's Aubrey King sits down with Aaron Brailsford, from F5 Security Incident Response Team (SIRT), Malcolm Heath and Sander Vinberg - both from F5 Labs - to talk about software supply chain security, the dangers of hard-coded credentials, package management, side-loading mobile applications and more. See you next month! Huge thanks to everyone who contributed to the community in October. If you have any ideas or suggestions, don't hesitate to pop over and write a comment in ourSuggestionsbox. See you out there in the community!
