SSLO 301: Automating SSL Orchestrator Deployments in Public Cloud (Agility 2022 | 2 hours)

Note

This lab relies on UDF Blueprint: Agility 2022 - SSL Orchestrator 301

The code provided for this lab was tested with BIG-IP 15.1.5.1 / SSL Orchestrator 7.5.2. At the time of lab development, the related Ansible modules did not fully support later SSL Orchestrator versions. This lab will be modified to support newer versions of SSL Orchestrator when updated Ansible modules are released.

Deploying F5 SSL Orchestrator on public cloud infrastructure presents new challenges that are not present in traditional on-premises environments.

In this lab, you will learn about:

• Recommended practices for deploying the SSL Orchestrator solution into public cloud environments.

• How to deploy and onboard new SSL Orchestrator instances using Terraform.

• How to configure SSL Orchestrator Topologies using Ansible playbooks.

Expected time to complete: 2 hours

Pre-requisite: Completion of the SSL Orchestrator 101 lab is recommended prior to attending this lab session.

CONTENTS

• 1. Lab Environment Access and Initial Setup
  • 1.1. Access the Jump Host
  • 1.2. Access the AWS Console
  • 1.3. Subscribe to EC2 Instances
  • 1.4. Download the Lab Files
• 2. Automating BIG-IP (SSL Orchestrator) Provisioning with Terraform
  • 2.1. What is Terraform?
  • 2.2. Lab Scenario
  • 2.3. Target Infrastructure End-State
  • 2.4. Review the Terraform Configuration Files
  • 2.5. Deploy the Terraform Configuration
  • 2.6. Review the Deployment in AWS Console
  • 2.7. Verify the BIG-IP (SSL Orchestrator) Configuration
• 3. Manual SSL Orchestrator Topology Configuration
  • 3.1. Scenario (Review)
  • 3.2. Configure and Deploy SSL Orchestrator Topology
  • 3.3. Test Application Access
  • 3.4. Delete the SSL Orchestrator Configuration
• 4. Automating SSL Orchestrator Topology Configuration with Ansible
  • 4.1. What is Ansible?
  • 4.2. Ansible Modules for SSL Orchestrator
  • 4.3. Example Ansible Playbooks
  • 4.4. Install F5 Ansible Collections
  • 4.5. Review Ansible Variables File
  • 4.6. Review Ansible Playbook
  • 4.7. Deploy SSL Orchestrator Topology
  • 4.8. Verify Configuration
  • 4.9. Test Application Access
• 5. Nuking the Configuration
  • 5.1. Delete the SSL Orchestrator Configuration (Ansible)
  • 5.2. Revoke the BIG-IP VE License (Ansible)
  • 5.3. Delete the AWS Deployment (Terraform)
• 6. Conclusion
• 7. SSL Orchestrator Labs
• 8. Contributors
• 9. Revision History
• 10. Lab Guide Repository (GitHub)