4. Lab 3: SSL Orchestrator Automation with Ansible

In the previous module, you manually created and deployed two Outbound Layer 3 Topologies with the following:

• SSL configurations

• Outbound Layer 3 Services

• Service Chains

• Security Policies

• Interception Rules

• Egress SNAT

• Log Settings

In this module, we will explore the ability to automate specific functions of the SSL Orchestrator using Ansible.

Examples of automation with Ansible include: - Automating the deployment of new topologies, services, and policies - Modifying existing configurations to add new services, or other components - Automating the deletion of existing configurations to reset the environment for new deployments or testing

CONTENTS

• 4.1. What is Ansible?
• 4.2. Ansible Modules for F5 BIG-IP SSL Orchestrator
• 4.3. Ansible Playbooks we can use in this lab
• 4.4. Ansible Environment Setup and Reset of Existing SSL Orchestrator Configuration
• 4.5. Automating a new L3 Outbound Deployment with TAP Service
• 4.6. Automating a new SWGaaS Deployment
• 4.7. Conclusion