F5 Distributed Cloud: Foundations of Delivery & Security

Welcome

In this lab, attendees will be introduced to the F5 Distributed Cloud Services platform. Attendees will create proxy services for publishing and securing applications that are served by both public and private endpoints.

Objectives:

• Gain an understanding of deploying proxy services to securely deliver an application with a public endpoint

• Gain an understanding of viewing telemetry data and utilizing it to tune WAAP policies

• Gain an understanding of how to deploy a site for providing connectivity to a private endpoint

Lab & Tasks:

The next page (Introduction) will cover the lab environment, access, and lab variables. The lab will be using a shared AWS account where we have deployed the following resources:

• NGINX webserver that is exposed to the Public internet (“Public Endpoint”)

• F5 Distributed Cloud site node that can be used to connect to AWS VPC (network)

• NGINX webserver that only has a private IP address with no external access

During the lab exercises we will explore different methods of protecting and exposing applications/webserver that are included in the lab

Labs:

• Introduction: Accessing F5 Distributed Cloud Console
  • Course/Lab Invitation
  • Accessing UDF (F5 Unified Demo Framework)
  • Accessing F5 Distributed Cloud
• Lab 1: Deploying F5 Distributed Cloud Proxy Services to Securely Deliver a Public Endpoint
  • Task 1: Configure Load Balancer and Origin Pool
  • Task 2: Testing the Application and Viewing Telemetry Data
  • Task 3: Add an Application Firewall Policy to Protect the Application
  • Task 4. Test the Application Firewall and View Security Events
• Lab 2: Deploying F5 Distributed Cloud Proxy Services to Securely Deliver a Private Endpoint via Regional Edges
  • Task 1. Create Private Origin Pool
  • Task 2. Create and Deploy a HTTP Load Balancer on F5 Distributed Cloud CE
  • Task 3: Configure WAF Policy
  • Task 4: Verify Configuration
  • Task 5: Verify WAF Protection
• Lab 3: Protecting a Private Endpoint
  • F5 Distributed Cloud AWS VPC Site
  • Task 1. Create Private Origin Pool
  • Task 2. Create and Deploy a HTTP Load Balancer on F5 Distributed Cloud CE
  • Task 3: Configure WAF Policy
  • Task 4: Verify Configuration
  • Task 5: Verify DNS
  • Task 6: Verify WAF Protection
• Conclusion
• Appendix