DevCentral ICYMI - August 2024
DevCentral publishes new content constantly, and it’s easy to miss the latest from F5’s technical user community with all that turnover. So here’s a monthly round-up of DevCentral news, content, and events—in case you missed it! New and Notable SAVE THE DATE: AppWorld 2025 - Feb 25–27 in Las Vegas! Content Round-Up Security Insights: (Didn't)KnowBe4, (In)Secure Boot, 91Won't, and, of course, CrowdStrike DigiCert DCV issue, Sitting Ducks and more - This Week In Security DEF CON & AMD Sinkclose Windows Critical RCE Vulnerability, Malicious Solana-py, and EDRKillShifter Chrome zero-day fix MS Copilot Log4Shel still being exploited What Are Scrapers and Why Should You Care? - Learn about Scrapers, automated tools designed to extract data from websites and APIs for various purposes, posing significant threats to organizations of all sizes. BIG-IP Next: Installing BIG-IP Next on Nutanix Community Edition - Bring up a BIG-IP Next Central Manager and BIG-IP Next virtual machine in a Nutanix CE environment. Streamlining BIG-IP NEXT Deployments: Automate with CI/CD Pipelines Using Terraform Cloud and GitHub - Any changes made in your GitHub repository automatically trigger Terraform Cloud to deploy the updated configurations to your BIG-IP NEXT instance via the BIG-IP NEXT Central Manager. iRules variables in BIG-IP Next: behavior change - See how iRules behavior will change for BIG-IP Next. F5 Distributed Cloud: F5 Distributed Cloud (XC) Global Applications Load Balancing in Cisco ACI Deploy F5 XC in Cisco ACI to securely deploy and load balance global applications across ACI sites (and public clouds). F5 Distributed Cloud Customer Edge on F5 rSeries – Reference Architecture - See how to deploy a Customer Edge site on F5 rSeries hardware. VIPTest: Rapid Application Testing for F5 Environments - Check out VIPTest - a tool designed as a convenience for anyone considering moving their applications from a different vendor solution (e.g., Citrix NetScaler) to F5. HTTPS Routing based on Client Certificates values with F5 Distributed Cloud - Want to use Client Certificates to authorize and route traffic to different destinations? This article can help you identify how to do it with F5 Distributed Cloud HTTP LB, XFCC, and Header Insert/Remove. NGINX: Automating NGINX Certificate Rotation on AWS - Two ways to connect AWS Secrets Manager and NGINX to help with TLS certificate rotation in a scalable way. Powering Progressive Deployment in Kubernetes with NGINX and Argo Rollouts - Use Argo and NGINX to make your application deployments better and faster in Kubernetes. Announcing F5 NGINX Gateway Fabric 1.3.0 with Tracing, GRPCRoute, and Client Settings - Get the latest on this new update. What is Message Queue Telemetry Transport (MQTT)? How to secure MQTT? - Learn how to use NGINX to secure MQTT. Securing and Scaling Hybrid Apps with F5 NGINX Part 4 - A reference architecture that replicates a Kubernetes cluster with an NGINX Ingress Controller deployment and NGINX Load Balancer with HA (High Availability). BIG-IP: Transparent load balancing in Azure, Part 2 - An advanced configuration of F5 BIG-IP behind Azure LB when running in Active/Standby mode and using the Floating IP option for forwarding traffic. Using Tcl packages in iRules - Learn how to convert Tcl packages to an iRules-compliant procs library. OWASP Tactical Access Defense Series: Broken Function Level Authorization (BFLA) - In this article, we are going through API5 item from OWASP Top 10 API Security risks and exploring F5 BIG-IP Access Policy Manager (APM) as a role in our arsenal. DevCentral Visits Jason Rahm and Aubrey King take on Black Hat 2024 in Las Vegas! Check out their videos from the event floor. Fortifying the flow: safeguarding our water supply from cyber threats - Imagine a world where water no longer flows from your tap. Jason Rahm talks about securing our water supply from a city in the middle of a desert.Announcing Security Insights
A small but mighty update to the DevCentral Article pages... Security Insights. Brought to you by the estimable engineers and analysts from our own F5 SIRT and F5 Labs teams the articles in Security Insights bring security research, threat analysis, and years of experience to bear on the cyber security industry into one destination on your DevCentral community. To begin, I have moved all of the This Week In Security #TWIS articles out of Technical Articles and into this new location. In the coming days I will also move select other pieces and going forward you can expect to see the Labs and SIRT team members share their content directly in this new location. Currently we expect about five or so new pieces each month.Click the bell icon at the top right to follow (and be notified) of any new posts. Any questions or feedback - you know where I work. LiefZimmermanGetting Started on DevCentral
DevCentral, supported by F5, is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems - together. Here are some tips to get you started, so you can maximize the value from this community space. Register a free user account Click the Register link at the top right of every DevCentral page Authenticate with any valid email address. TIP: You may use the same email address as your MyF5 profile (this will enable a simpler, Single Sign On (SSO) experience between my.f5.com and community.f5.com) or you may opt to use a personal email address for your community profile. Using a personal email address for community usually requires a separate login, using a customer email account, to access support and subscription information via my.f5.com. Next you will be taken to a confirmation page Email Verification You will receive an email from <noreply@mail.account.f5.com> Click theActivate Account button in the confirmation email in order to activate your new account. Setting up MFA / 2-step Authentication Successful email activation brings you to 2-Step Authentication setup. Mandatory: Choose one or more of the available 2-step modes to secure your account and follow the steps provided. Complete (DevCentral) Registration Once you have finished with 2-step Authentication you will be asked to Choose a unique username Accept the Terms of Service. Click the Complete button TIP: You will receive confirmation email fromnoreply@mail.account.f5.com related to your SSO account AND email fromreplies-disabled@community-mail.f5.com welcoming you to the community or alerting you to badges earned, etc. To be notified in the future of content updates you choose to follow - be sure to allow email from replies-disabled@community-mail.f5.com You may also choose to limit what email you want to see and/or how often you want to see it by configuring your Follows & Notification Preferences under My Profile > My Settings. Congratulations! Your DevCentral community profile is complete. Build Community Profile To maximize the value of your community experience visit My Settings to adjust the behavior of the community to suit your needs. Settings includePersonal details, global Preferences, settings under Follows & Notificationsto control platform alerts and email, and Security & Account settings to control your data. Click on your profile avatar in the top right of the page and go to My Settings. Personal Information Change your username, avatar, Bio, Personal Notes, and Personal Site URL at any time. RE: Email Addresses At this time email addresses are key and cannot be changed directly. To update an email address on an existing DevCentral profile contact us atDevCentralFeedback@f5.com and ask to help updating your email address. Preferences At this time preference options are limited to Date and TimeZone choices. Follows & Notifications See the content you areFollowing. You can filter the way this displays using the dropdown at the top. A revealed ellipses at right lets you unfollow. Below that is the Email Notification preferences. Including global enable/disable and choices for delivery timing for all manner of triggers. Security & Account Personal information related to IP Addresses and the ability to download a copy of your data from the community is here. Only you can see this information. Still need help? Make sure to check out the Help Page first, and if you still can’t find what you need, send a message to DevCentralFeedback@f5.com and we’ll work to get your issue sorted.F5OS operations guide for VELOS and rSeries systems now available!
MyF5 has published the newF5OS operations guide for F5 VELOS and rSeries systems to help you keep your F5 VELOS (F5OS-C) and F5 iSeries (F5OS-A) systems healthy, optimized, and performing as designed. This single-article operations guide provides descriptions for system components and useful links to other F5 content about configuring components and fixing common issues. Topics Current state of the system Hardware diagnostics and troubleshooting Networking Access and authentication UpgradesF5 Partners join us for Partner Connect Quarterly Update: May 21 & 22
We are excited to invite you to the F5 Partner Connect Quarterly Update, an exclusive event designed to empower our partners with cutting-edge insights and strategic direction. Join us on May 21st and 22nd for a deep dive into F5's transformation journey and the unlocking of API security potential. May 21 12pm SGT: Asia Pacific, China, and Japan May 22: 2pm BST: Europe, Middle East, and Africa 11am PDT: Americas We will revisit F5’s evolution and reinforce our stance on API security, spotlighting our strategic acquisitions of WIB and Heyhack. Chuck Herrin, Senior Principal Product Manager for Security and former CTO at WIB, will delineate F5's forward-thinking approach in the application and API security landscape. Josh Goldfarb, Global Solutions Architect for Security will present 10 actionable best practices. These insights will help you, our valued partners, to maximize profitability and leverage F5’s innovative solutions for unparalleled market opportunities. Do not miss this chance to connect with F5 leaders and stay at the forefront of the security domain. Together, let's transform challenges into opportunities and elevate API security to new heights. Register Now!2024 DevCentral MVP Announcement
Congratulations to the 2024 DevCentral MVPs! TheDevCentral MVP Award is given annually to the outstanding group of experts in the technical F5 user community who go out of their way to engage with the user community. The award is our way of recognizing their significant contributions, because while all of our users collectively make DevCentral one of the top community sites around and a valuable resource for everyone, MVPs regularly go above and beyond in assisting fellow F5 practitioners by sharing their deep technical experience and knowledge. MVPs get badges in their DevCentral and Reddit profiles so everyone can see that they are recognized experts. They also receive MVP swag, and invitations to regular exclusive webinars and behind-the-scenes looks at things like roadmaps, new product sneak-previews, and innovative concepts in development at F5. DevCentral is grateful for and proud to recognisethe technical knowledge and exemplary community engagement of these 43 outstanding community members: Amine_Kadimi Amr_Ali Austin_Geraci boneyard Bryan_T_ CA_Valli Daniel_Wolf Dario_Garrido Enes_Afsin_Al F5_Design_Engineer jaikumar_f5 Jim_Schwartzme1 JoseLabra JoshBecigneul Juergen_Mang Kai_Wilke KeesvandenBos Kevin_Davies Lidev lnxgeek LouisK Mayur_Sutare Michael_Saleem mihaic Mike757 Mohamed_Ahmed_Kansoh Mohamed_Salah_ Niels_van_Sluis Nikoolayy1 P_Kueppers Patrik_Jonsson Paulius PhatANhappy Philip_Jonsson PSFletchTheTek Rodolfo_Nützmann Samir ScottE Sebastian_Mani1 Sebastiansierra StephanManthey Tofunmi Whisperer
