1. AMAZON SIMPLE CLOUD DEPLOYMENT Matt Quill Charlie Cano

2. 2© F5 Networks, Inc. Objectives Enable simple ‘spin-up’ of BIG-IP instances in the AWS cloud Provide visual guidance (Pictures) demonstrating the setup and deployment of BIG-IP in AWS Ensure consistent, simple deployment of the BIG-IP LTM in the AWS cloud Identify caveats vs. standard deployment of the BIG-IP VE Resolve key ‘gotchas’ that can frequently trip up users in deploying the BIG-IP Ensure that Tier I applications can be easily deployed in the AWS cloud

3. 3© F5 Networks, Inc. High Level Steps Create VPC with 3 Subnets Create Key Pair Create Security Groups Deploy BIG-IP instance SSH into BIG-IP and change admin password

4. 4© F5 Networks, Inc. Step 1: Create VPC Required for multi- interface support Strongly recommended to use the Wizard to create the VPC Select VPC with Public and Private Subnets In this example we will create 3 subnets 10.0.0.0/24, 10.0.1.0/24. 10.0.2.0/24

5. 5© F5 Networks, Inc. Step 1 Cont: In this example we create 2 subnets with internal and external subnets and the default IP CIDR block of 10.0.0.0/16 Accept the defaults and the VPC will be created Make sure that both subnets will be in the same availability zone

6. 6© F5 Networks, Inc. Creation of VPC

7. 7© F5 Networks, Inc. Step 2: Create Additional Subnet In this example we will create an additional subnet. In this example we assign this to Availability Zone us- east-1d

8. 8© F5 Networks, Inc. Step 2: Create Default Route

9. 9© F5 Networks, Inc. Step 4 Create Security Groups Create 2 security groups 1 to just allow ICMP, HTTP and SSH traffic and one to allow all traffic Create the following security rules (see below)

10. 10© F5 Networks, Inc. Create Security Groups (Cont.)

11. 11© F5 Networks, Inc. Launch F5 BIG-IP AMI From the EC2 Console Click on ‘Launch Instance’ (make sure you are in the same location as when you created the VPC)

12. 12© F5 Networks, Inc. Launch F5: (Virginia)

13. 13© F5 Networks, Inc. Click ‘Launch with EC2’ (Virginia Choose Same Location as VPC

14. 14© F5 Networks, Inc. Launch AMI (cont)

15. 15© F5 Networks, Inc. Launch AMI (Cont) Choose VPC and Subnet

16. 16© F5 Networks, Inc. Launch AMI (Cont) Choose 2 Network Interfaces

17. 17© F5 Networks, Inc. Launch AMI (Cont.)

18. 18© F5 Networks, Inc. Launch AMI (Cont)

19. 19© F5 Networks, Inc. Launch AMI (Create Key Pair)

20. 20© F5 Networks, Inc. Launch AMI (Specify Security Group)

21. 21© F5 Networks, Inc. Click ‘Launch’

22. 22© F5 Networks, Inc. AMI Now Running in EC2

23. 23© F5 Networks, Inc. Add 3 rd Interface Navigate to the Network Interfaces Section of the EC2 console and click ‘Create Network Interface’ in this example we will choose the 10.0.2.0 subnet. After creating the interface attach the network interface to the running BIG-IP instance

24. 24© F5 Networks, Inc. Associate External IP to Interface In this example we will select the 10.0.0.0/24 subnet. The External IP was configured when we ran the VPC creation wizard

25. 25© F5 Networks, Inc. Optional: Convert *.pem Key to *.ppk for Putty Access Download and install the putty key generator utility Locate your previously created *.pem key Once loaded in puttygen, click save private key You will be prompted to choose a passphrase for your key feel free to do so.

26. 26© F5 Networks, Inc. SSH into BIG-IP and Change Admin Password Log in to Putty or via another SSH utility as root. Be sure to load your private key for connectivity After logging in, type tmsh modify auth password admin Set and confirm your administrative password You will now be able to access the web UI of the BIG-IP Configure the BIG-IP just as you would any other non-AWS big-IP

27. 27© F5 Networks, Inc. Complete!

28. 28© F5 Networks, Inc. devcentral.f5.com facebook.com/f5networksinc linkedin.com/companies/f5-networks twitter.com/f5networks youtube.com/f5networksinc