F5BigCnePortlist

Overview

The F5BigCnePortlist Custom Resource (CR) is useful for defining larger, more complex sets of service ports, that can then be referenced by any of the Service Proxy for Kubernetes (SPK)protection and NAT CRs:

• F5BigNatPolicy - Carrier-grade NAT (CG-NAT) using large-scale NAT (LSN) pools.

• F5BigFwPolicy - Granulalar packet filtering based on access control list (ACL) policies.

• F5BigDdosProfile - Denial of Service (DoS/DDoS) event detection and mitigation.

This document guides you through creating a simple F5BigCnePortlist.

Note: The F5BigCneAddresslist CR is useful for defining lists of IP addresses ports.

Parameters

The CR spec parameters used to configure the Service Proxy TMM static routing table are:

Parameter	Description
ports	The service ports included in the port list. Port 0 is not a valid value, and is not allowed.
portLists	This is a string which refers to another portlist that consists of either ports or child portlists.

Requirements

Ensure you have:

• Uploaded the SPKs Software.

• Installed the SPK Controller Pods.

• Have a Linux based workstation.

Installation

Use the following steps to install the F5BigCnePortlist CR:

Tip: Open a second shell to view the SPKs Event Logs while installing.

1. Copy the example CR into a YAML file:

   apiVersion: "k8s.f5net.com/v1"
   kind: F5BigCnePortlist
    metadata:
      name: "allow-5000-80"
      namespace: "spk-ingress"
    spec:
      ports:
        - "5000-5500"
        - "80"
      portLists:
        -	“portList1”
        - “portList2”
    apiVersion: "k8s.f5net.com/v1"
    kind: F5BigCnePortlist
    metadata:
      name: "portList1"
      namespace: "spk-ingress"
    spec:
      ports:
        - "4000-4100"
        - "8080"
      portLists:
        -	“portList3”
        -	“portList4”
   

2. Install the F5BigCnePortlist CR.

   oc apply -f spk-port-list.yaml
   

   In this example, the SPK Controller logs indicate the F5BigCneAddresslist CR was added/updated:

   I0607 12:00:00.12345   1 event.go:282] Event(v1.ObjectReference{Kind:"F5PortList", 
   F5PortList spk-ingress/allow-5000-80 was added/updated
   

Feedback

Provide feedback to improve this document by emailing spkdocs@f5.com.