Elevate Your Skills - Register for AppWorld 2025
AppWorld 2025 is set for February 25-27 in Las Vegas. Focusing on application security and delivery, this three-day event is packed with expert-led sessions, hands-on labs, and networking opportunities for practitioners and experts from around the world. F5 Academy is at the Heart of AppWorld 2025. Ideal for those working towards certification. You’ll engage with F5's latest products through hands-on labs, sharpen your skills, and earn digital badges. One free certification practice exam will be available before the event. You can earn (ISC)2 CPE credits for certain security-focused labs, and F5 will handle credit submission for you. --------------------------------------- UPDATE Nov 11. --------------------------------------- Labs and Briefings To Attend Find the full list of labs and briefingson the F5 Academy at AppWorld 25 page. F5 in the AI Era: For users who are new to AI, this briefing explores how F5 technology can help organizations with their AI journeys. F5 NGINX One: Learn how the NGINX One console provides visibility into a global fleet of NGINX instances, both NGINX Plus and NGINX Open Source (OSS). F5 Distributed Cloud: Discovering & Securing APIs: Get hands-on experience with the API Discovery and Security capabilities of F5 Web Application and API Protection (WAAP) within F5 Distributed Cloud. -------------------------------------------------------------------------------------------------- Why Attend? Learn: Access a year's worth of knowledge in three days through keynotes, solution-focused breakouts, product deep-dives, and roundtables. Connect: Network with professionals from DevCentral, NGINX, and F5 Insiders communities. Influence: Share your experiences with BIG-IP, Distributed Cloud, and NGINX to influence F5’s technology direction. Elevate your technical skills and connect with peers at AppWorld 2025; a must-attend event. Register for AppWorld 2025 today and join us in Las Vegas!DevCentral ICYMI - September 2024
DevCentral publishes new content constantly, and it’s easy to miss the latest from F5’s technical user community with all that turnover. So here’s a monthly round-up of DevCentral news, content, and events—in case you missed it! New and Notable Share Your Expertise at F5 AppWorld 2025! CFP is now open. F5 and NetApp partnership for Large Language Model AI deployments - F5 and NetApp have teamed up to improve enterprise AI capabilities by using F5’s secure multicloud networking solutions with NetApp’s data management tools. Experience the power of F5 NGINX One with feature demos - Introducing F5 NGINX One, a powerful solution designed to significantly enhance business operations with its high-performance data plane and user-friendly SaaS-based console, offering robust traffic management and critical monitoring features. Content Round-Up AI/LLM F5 BIG-IP and NetApp StorageGRID - Providing Fast and Scalable S3 API for AI apps - F5 BIG-IP's advanced load balancing improves HTTPS server performance. It ensures high availability and optimal storage node utilization when used with NetApp's StorageGRID S3 compatible object storage. How to Prepare Your Network Infrastructure to Add HPC Clusters for AI to Your Data Center - HPC AI cluster integration in enterprise data centers brings challenges, such as network segmentation, security, and high costs. Learn how to overcome these challenges. F5 Distributed Cloud: How I Did it - Migrating Applications to Nutanix NC2 with F5 Distributed Cloud Secure Multicloud Networking - Enterprises struggle to scale and migrate applications while maintaining consistent security and user experience. F5 Distributed Cloud Services (XC) simplifies extending and migrating applications from on-premises environments to Nutanix NC2 clusters, backed by Nutanix's comprehensive hyper-converged infrastructure. Security Insights What is Web Cache Exploitation? - Explore insights from a recent BlackHat/DefCon 2024 presentation on Web Cache Exploitation, which reveals how discrepancies in HTTP server and proxy behaviors can lead to vulnerabilities like Web Cache Poisoning and Web Cache Deception. (HTTP) Redirection via Arbitrary Host Header - In this article, we delve into the importance of the Host header in web requests, its role in enabling multiple-domain hosting, and the potential security risks associated with improper handling. How to Identify and Manage Scrapers (Pt. 1) and How to Identify and Manage Scrapers (Pt. 2) - Here are different ways to find and manage web scraping activities. This includes: scrapers that identify themselves, identifying using IP address, more advanced techniques for finding scrapers that don't identify themselves. We will also talk about the challenges caused by pretending to be someone else and the increase in scraping done by AI. Exploring the Zero Trust Models of AWS, Microsoft, and Google - In response to distributed workforces and advanced cyber threats, the Zero Trust Model enforces strict identity verification, granular access control, and continuous monitoring for users, devices, and resources. Major cloud providers like AWS, Microsoft, and Google have their own versions. Scanning for CVE-2017-9841 Drops Precipitously - The July 2024 Sensor Intelligence Series reports a significant drop in scanning activities for vulnerabilities CVE-2017-9841 and CVE-2023-1389, despite their previous high levels. This highlights the importance of ongoing cybersecurity vigilance. Scuba Gear from CISA, ROBLOX Malware Campaign, and RUST backdoo-rs This Week in Security Leaks & breaches, memory-safe C++, cryptominers and bridging the air-gap This Week in Security GC Document AI Transitive Access Abuse, make-me-root holes in VMWare fixed and more - This Week in Security BIG-IP Next: How to secure egress with F5 Service Proxy for Kubernetes (Japanese language version: 次世代のBIG-IP SPKとK8s コンテナの外部アクセス制御) - Securing Kubernetes egress traffic can be challenging. F5's Service Proxy for Kubernetes (SPK) offers a solution. It dynamically manages egress through its Calico egress gateway. This allows for central control, consistent network policies, and source NAT translation. BIG-IP Next Installation Guides - These resources will walk you through the initial steps of getting Central Manager and instances installed on the various platforms for labs and production. F5 Distributed Cloud: How I Did it - Migrating Applications to Nutanix NC2 with F5 Distributed Cloud Secure Multicloud Networking -Enterprises face challenges with scaling and migrating applications. F5 Distributed Cloud Services (XC) helps by enabling seamless application extension and migration, as shown with Nutanix NC2 clusters. Architecture Options for Kubernetes Service Discovery in Distributed Cloud - F5 Distributed Cloud (XC) Virtual Edition Customer Edge increases service discovery in Kubernetes clusters, allowing easy connectivity in dynamic microservices environments. Cascading Configs Tool for F5 Distributed Cloud Managed Service Provider (MSP) and Delegated Access Customers - The new XC-Cascading-Configs tool simplifies configuration management for F5 Distributed Cloud customers. It allows efficient push and maintenance of shared configurations across multiple tenants. NGINX: Deploying F5 NGINX Plus Graviton-powered Containers as AWS ECS Fargate Tasks - Amazon's Graviton4 chip offers great price-performance for cloud architects. NGINX Plus works with ARM64, ECS, and ECS Fargate. It's easy to set up, use, and scale within AWS. Announcing F5 NGINX Gateway Fabric 1.4.0 with IPv6 and TLS Passthrough - NGINX Gateway Fabric 1.4.0 features IPv6 support, TLS passthrough, server zone metrics, custom pod annotations, and improved testing automation. It ensures stability and performance for Kubernetes clusters. BIG-IP: F5 BIG-IP deployment with Red Hat OpenShift - keeping client IP addresses and egress flows - OpenShift 4.14's AdminPolicyBasedExternalRoute improves control of egress traffic by utilizing F5 BIG-IP as the default gateway for certain namespaces. This feature ensures client IP preservation and integrates security functions. BIG-IP VE in Red Hat OpenShift Virtualization - Running BIG-IP VE in Red Hat OpenShift Virtualization connects virtual machines and Kubernetes. This simplifies management and operations by using OpenShift's KubeVirt and QEMU+KVM Linux virtualization layers. VMware to Red Hat OpenShift Virtualization Migration - Seamlessly migrate workloads and BIG-IP Virtual Editions from VMware to OpenShift Virtualization. Our comprehensive guide will streamline your transition and unify your application infrastructure. F5 Cloud Failover Extension (CFE), private endpoints, and custom DNS - Using the F5 Cloud Failover Extension (CFE) for API-based failover in public cloud environments can cause issues with API calls being blocked. This is due to custom DNS settings and private endpoints. To resolve this, configure DNS settings to properly resolve private IP addresses.DevCentral ICYMI - August 2024
DevCentral publishes new content constantly, and it’s easy to miss the latest from F5’s technical user community with all that turnover. So here’s a monthly round-up of DevCentral news, content, and events—in case you missed it! New and Notable SAVE THE DATE: AppWorld 2025 - Feb 25–27 in Las Vegas! Content Round-Up Security Insights: (Didn't)KnowBe4, (In)Secure Boot, 91Won't, and, of course, CrowdStrike DigiCert DCV issue, Sitting Ducks and more - This Week In Security DEF CON & AMD Sinkclose Windows Critical RCE Vulnerability, Malicious Solana-py, and EDRKillShifter Chrome zero-day fix MS Copilot Log4Shel still being exploited What Are Scrapers and Why Should You Care? - Learn about Scrapers, automated tools designed to extract data from websites and APIs for various purposes, posing significant threats to organizations of all sizes. BIG-IP Next: Installing BIG-IP Next on Nutanix Community Edition - Bring up a BIG-IP Next Central Manager and BIG-IP Next virtual machine in a Nutanix CE environment. Streamlining BIG-IP NEXT Deployments: Automate with CI/CD Pipelines Using Terraform Cloud and GitHub - Any changes made in your GitHub repository automatically trigger Terraform Cloud to deploy the updated configurations to your BIG-IP NEXT instance via the BIG-IP NEXT Central Manager. iRules variables in BIG-IP Next: behavior change - See how iRules behavior will change for BIG-IP Next. F5 Distributed Cloud: F5 Distributed Cloud (XC) Global Applications Load Balancing in Cisco ACI Deploy F5 XC in Cisco ACI to securely deploy and load balance global applications across ACI sites (and public clouds). F5 Distributed Cloud Customer Edge on F5 rSeries – Reference Architecture - See how to deploy a Customer Edge site on F5 rSeries hardware. VIPTest: Rapid Application Testing for F5 Environments - Check out VIPTest - a tool designed as a convenience for anyone considering moving their applications from a different vendor solution (e.g., Citrix NetScaler) to F5. HTTPS Routing based on Client Certificates values with F5 Distributed Cloud - Want to use Client Certificates to authorize and route traffic to different destinations? This article can help you identify how to do it with F5 Distributed Cloud HTTP LB, XFCC, and Header Insert/Remove. NGINX: Automating NGINX Certificate Rotation on AWS - Two ways to connect AWS Secrets Manager and NGINX to help with TLS certificate rotation in a scalable way. Powering Progressive Deployment in Kubernetes with NGINX and Argo Rollouts - Use Argo and NGINX to make your application deployments better and faster in Kubernetes. Announcing F5 NGINX Gateway Fabric 1.3.0 with Tracing, GRPCRoute, and Client Settings - Get the latest on this new update. What is Message Queue Telemetry Transport (MQTT)? How to secure MQTT? - Learn how to use NGINX to secure MQTT. Securing and Scaling Hybrid Apps with F5 NGINX Part 4 - A reference architecture that replicates a Kubernetes cluster with an NGINX Ingress Controller deployment and NGINX Load Balancer with HA (High Availability). BIG-IP: Transparent load balancing in Azure, Part 2 - An advanced configuration of F5 BIG-IP behind Azure LB when running in Active/Standby mode and using the Floating IP option for forwarding traffic. Using Tcl packages in iRules - Learn how to convert Tcl packages to an iRules-compliant procs library. OWASP Tactical Access Defense Series: Broken Function Level Authorization (BFLA) - In this article, we are going through API5 item from OWASP Top 10 API Security risks and exploring F5 BIG-IP Access Policy Manager (APM) as a role in our arsenal. DevCentral Visits Jason Rahm and Aubrey King take on Black Hat 2024 in Las Vegas! Check out their videos from the event floor. Fortifying the flow: safeguarding our water supply from cyber threats - Imagine a world where water no longer flows from your tap. Jason Rahm talks about securing our water supply from a city in the middle of a desert.Announcing Security Insights
A small but mighty update to the DevCentral Article pages... Security Insights. Brought to you by the estimable engineers and analysts from our own F5 SIRT and F5 Labs teams the articles in Security Insights bring security research, threat analysis, and years of experience to bear on the cyber security industry into one destination on your DevCentral community. To begin, I have moved all of the This Week In Security #TWIS articles out of Technical Articles and into this new location. In the coming days I will also move select other pieces and going forward you can expect to see the Labs and SIRT team members share their content directly in this new location. Currently we expect about five or so new pieces each month.Click the bell icon at the top right to follow (and be notified) of any new posts. Any questions or feedback - you know where I work. LiefZimmermanGetting Started on DevCentral
DevCentral, supported by F5, is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems - together. Here are some tips to get you started, so you can maximize the value from this community space. Register a free user account Click the Register link at the top right of every DevCentral page Authenticate with any valid email address. TIP: You may use the same email address as your MyF5 profile (this will enable a simpler, Single Sign On (SSO) experience between my.f5.com and community.f5.com) or you may opt to use a personal email address for your community profile. Using a personal email address for community usually requires a separate login, using a customer email account, to access support and subscription information via my.f5.com. Next you will be taken to a confirmation page Email Verification You will receive an email from <noreply@mail.account.f5.com> Click theActivate Account button in the confirmation email in order to activate your new account. Setting up MFA / 2-step Authentication Successful email activation brings you to 2-Step Authentication setup. Mandatory: Choose one or more of the available 2-step modes to secure your account and follow the steps provided. Complete (DevCentral) Registration Once you have finished with 2-step Authentication you will be asked to Choose a unique username Accept the Terms of Service. Click the Complete button TIP: You will receive confirmation email fromnoreply@mail.account.f5.com related to your SSO account AND email fromreplies-disabled@community-mail.f5.com welcoming you to the community or alerting you to badges earned, etc. To be notified in the future of content updates you choose to follow - be sure to allow email from replies-disabled@community-mail.f5.com You may also choose to limit what email you want to see and/or how often you want to see it by configuring your Follows & Notification Preferences under My Profile > My Settings. Congratulations! Your DevCentral community profile is complete. Build Community Profile To maximize the value of your community experience visit My Settings to adjust the behavior of the community to suit your needs. Settings includePersonal details, global Preferences, settings under Follows & Notificationsto control platform alerts and email, and Security & Account settings to control your data. Click on your profile avatar in the top right of the page and go to My Settings. Personal Information Change your username, avatar, Bio, Personal Notes, and Personal Site URL at any time. RE: Email Addresses At this time email addresses are key and cannot be changed directly. To update an email address on an existing DevCentral profile contact us atDevCentralFeedback@f5.com and ask to help updating your email address. Preferences At this time preference options are limited to Date and TimeZone choices. Follows & Notifications See the content you areFollowing. You can filter the way this displays using the dropdown at the top. A revealed ellipses at right lets you unfollow. Below that is the Email Notification preferences. Including global enable/disable and choices for delivery timing for all manner of triggers. Security & Account Personal information related to IP Addresses and the ability to download a copy of your data from the community is here. Only you can see this information. Still need help? Make sure to check out the Help Page first, and if you still can’t find what you need, send a message to DevCentralFeedback@f5.com and we’ll work to get your issue sorted.
