F5 BIG-IP Next for Kubernetes on NVIDIA BlueField-3

📘Release Notes› Learn about the latest features, fixed issues, and known issues

Installation

📘Are you curious about BIG-IP Next for Kubernetes on NVIDIA BlueField3 DPU?? Get started with BIG-IP Next for Kubernetes on NVIDIA BlueField3 DPU

📘Interested in setting up BIG-IP Next for Kubernetes on NVIDIA BlueField3 DPU for the first time?? Get started with setting up BIG-IP Next for Kubernetes on NVIDIA BlueField3 DPU

Supported Resources

📘Custom Resource Definitions (CRDs)› Learn about Custom Resource Definitions (CRDs)

📘Troubleshooting› Learn about Custom Resources (CRs)

Introduction

• BIG-IP Next for Kubernetes
• Release Notes
  • BIG-IP Next for Kubernetes v2.1.0 Release Notes
  • BIG-IP Next for Kubernetes Known Issues
  • BIG-IP Next for Kubernetes Fixed Issues
  • Upgrade BIG-IP Next for Kubernetes from v2.0.0 to v2.1.0

Preparing to Install

• System Requirements
• BIG-IP Next for Kubernetes Software Images
• Configure Node Label for TMM
  • Apply a Taint on DPU Node(s)
• Artifacts via F5 Artifact Registry (FAR)
  • Requirements
  • Download the Service Account Key
  • Helm Registry Login
  • Download the Manifest File
  • Download Helm charts
• Create FAR secret in namespaces
• Configure Cert Manager
• Create OTEL Certs
• Create Cluster Wide Controller Certificates
  • Create CWC REST API certificates
• Create Storage Class

Install BIG-IP Next for Kubernetes

• F5 BIG-IP Next for Kubernetes Software Installation
  • F5 Lifecycle Operator
  • Install F5 Lifecycle Operator
  • Install BIG-IP Next for Kubernetes
• Cluster-wide RBACs for BNK
  • CNE Controller (f5ingress)
  • CWC
  • CSRC
  • Cert
• Set-up BIG-IP Next for Kubernetes License
  • Licensing Modes
  • Renew Your License
  • Licensing APIs
  • Telemetry reports
• Install and Configure F5 License Proxy
  • Install FLP in a Kubernetes cluster using Helm charts
  • Install FLP in a VM using the FLP QCOW2 or OVA image
• Configure the Network
  • Annotate Internal-facing interfaces
  • Apply internal and external F5SPKVlan CR
• Deploying Applications and Testing Traffic
  • Prerequisites
  • Ingress Traffic
  • Egress Traffic
• BIG-IP Next for Kubernetes CRDs
  • Networking CRs
  • Application traffic CRs
  • Protection and NAT CRs
  • Firewall CRs
  • Finalizers
• Gateway API
  • Benefits of Gateway API
  • Introduction to roles in Gateway API
  • Gateway API Architecture
  • Prerequisites
  • CNE controller
  • Gateway API CRs
  • Gateway API Conformance tests
  • Using F5 IPAM Controller
  • Firewall policy in Gateway API
  • F5 iRules in Gateway API
  • High-Speed Log (HSL) profiles in Gateway API
  • Ingress DDoS protection in Gateway API
  • Supplemental
  • Feedback

How-Tos

• F5 IPAM Controller for Gateway API
  • Overview
  • About F5 IPAM Controller (FIC)
  • FIC implementation
  • Use cases of FIC
  • Use case 1: IP address is defined in the Gateway
  • Use case 2: IP address is not defined in the Gateway
  • Status CR
• Whole Cluster Mode in BIG-IP Next for Kubernetes
  • Whole Cluster Mode Architecture
  • Deploy TMM Pods as a DaemonSet
  • Deploy BIG-IP Next for Kubernetes Controller as a Single SPKInstance
• ZebOS ConfigMaps
  • Create ZebOS ConfigMap
  • View the ZebOS ConfigMap
• BIG-IP Next for Kubernetes Coremond
  • Overview
  • Prerequisites
  • Platform-Specific Core Patterns
  • Configure Rotation and Retention
  • Coremond Installation
  • Generate a Core File
  • Validate the Core File
• AI Inferencing Load Balancing

Overviews

• BIG-IP Next for Kubernetes CWC
  • CPCL module
  • CPCL modes
  • RabbitMQ
  • CWC Service
  • RabbitMQ Service
  • CWC capabilities
• Fluentd Logging
  • Fluentd Service
  • Log file locations
  • Supplemental
• dSSM Database
  • Sentinel Service
  • Supplemental
• OTEL Collector
  • Overview
  • TMM OTEL Service
  • Fetching OTEL Data
  • Procedures
  • Next step
  • Feedback
  • Supplemental
• TMM Resources
  • TMM Pod limit values
  • Guaranteed QoS class
  • Modifying defaults
  • Supplemental
• Debug Sidecar
  • Command-Line Utilities
  • Connecting to the debug sidecar
  • Command examples
• Debug API
  • Diagnostic Utilities
  • CWC Debug REST APIs
  • Diagnostic Utilities Examples
  • Procedure
• Admin Access and API Restrictions
  • Retrieve the Admin Token
  • Use the Admin Token to Authenticate REST API Request
• Distributed Toda for Stats Aggregation
  • Overview
  • Distributed Toda Pods Roles
  • Metrics Flow Architecture
  • Distributed Toda Pods Installation
  • Metrics Export Intervals
  • OTEL Statistics
  • Prometheus and Grafana

Troubleshooting

• QKView API and iHealth
  • QKView REST APIs
  • iHealth
• Troubleshooting
  • Troubleshooting common error scenarios
• Log Formats
  • TMM
  • BIG-IP Next for Kubernetes Controller
  • BIG-IP Next for Kubernetes CWC
  • Log Types
  • Log Levels / Severity Levels
  • Log Messages List

References

• F5BigDdosGlobal CRD
  • hslPublisher
  • allowList
  • DoS tuneable parameters
  • vectors
• F5BigFwPolicy
  • CR parameters
  • CR Example
• F5BigFwRulelist
  • Overview
  • CR parameters
  • Sample CR
  • Maximum rule size
  • Creating Firewall Rule List
• F5BigLogHslpub
  • Overview
  • Parameters
• F5BigLogProfile
  • CR parameters
  • CR Examples
  • CR shortName
  • Requirements
  • Installation
• F5BigCneAddresslist
  • Overview
  • Parameters
  • Sample CR
  • Create and apply F5BigCneAddresslist CR
• F5BigCnePortlist
  • Overview
  • Parameters
  • Sample
  • Applying F5BigCnePortlist CR
  • Feedback