Automate DevOps/SecOps with CI/CD using F5 BIG-IP, SovLabs, and VMware vRealize Automation

Deploying applications at the speed of users can paradoxically be something of a slog. IT, DevOps, and SecOps organizations may spend hours/days/months trying to figure out ways to simplify the delivery of applications while providing the safety and security required by today’s users.

The pervasive challenge is to enable process, technology, and team integration without running into common pitfalls such as aggressively siloed infrastructures and the dreaded vendor lock-in. One major step in the right direction is finding a way to ensure that you’re positioned to deploy applications with best-of-breed load balancing and security capabilities that can easily be automated.

It’s true, many vendors may try to push all-in-one-type solutions that deliver basic functionality or the dicey “Almost Good Enough” security and load balancing. The recurring drawback with these types of all-in-one bundles is that—for lack of a better way to put it—you live in their box, only able to access the limited tools available inside that box.

Obviously, this doesn’t so much fly with developers, long since conditioned on the benefits of straying outside previously defined parameters in the name of achieving targeted business results. The trick is, of course, combining developer flexibility with reliable safeguards rigorous enough to satisfy security teams accustomed to a lack of compromise.

So…Is there such a solution?

Well, I’m gratified to tell you that, in working with leading technology partners, we have a fine candidate to address the scenario described above. It starts with F5 BIG-IP functionality (via physical or virtual appliances) such as load balancing, global server load balancing, and application security that can be created, managed, scaled, and managed from a lifecycle perspective within the VMware vRealize Automation (vRA) catalog using SovLabs solutions.

At this point, I’ll respectfully defer to David Coulter from SovLabs for a detailed description and commentary outlining how the solution works:

The entire request, scaling, and de-provisioning process is powered by SovLabs RESTipe®, a framework feature that enables customizable template-based consumption of vRealize Automation metadata and REST-based endpoints.

From a single request, users can specify the load balancer virtual server creation or re-use, utilize SovLabs naming policies for virtual servers and pools, specify node-level settings such as member port, connection and rate limit, priority, ratio and virtual-level settings such as port number, VIP, SSL profiles, iRules, Health monitors, Load balancing methods, etc. There is also built-in support for multiple IPAM and DNS providers for virtual IP address (VIP) allocation and registration, such as SolarWinds, BlueCat, Infoblox, Men & Mice, BT Diamond IP, and Microsoft. And anything a user can request, an admin can pin in a vRealize Automation blueprint to further simplify complex requests for end-users – reusability is automatic.

____

Working with each other’s strengths, F5, SovLabs, and VMware have found a way to reduce the amount of work needed to deploy and deliver BIG-IP solutions (Load Balancing/Security/Global DNS) in this desired model down to a simple click and deploy of RESTipe.

And all without custom code!
 

Admittedly, that is a fair amount of technical and vendor-specific detail for this blog, so these resources are also provided for your consumption:

• Video demo of the integrated solution
• Guidance documentation for the SovLabs F5 Module for vRealize Automation

A Word about Ansible and Automation

While the integration described above doesn’t require the use of Ansible, organizations can certainly benefit from the integration with this as a component of their infrastructure. That is, for customers interested in using vRA as an infrastructure automation engine while using Ansible (or Ansible Tower) to automate the deployment of their workloads, the advantages of this integration are completely compatible.

For more information on this element, these resources are a good place to start:

• Integrating vRealize Automation and Ansible Tower
• SovLabs Ansible Tower Module for VMware’s vRealize Automation – Provisioning

{{cta(‘548f29cb-4e0f-4787-b144-57105fc5d8a3′,’justifycenter’)}}