KEMBAR78
NGINX Controller: faster deployments, fewer headaches | PDF
NGINX Controller
KOEN VANDERPOORTEN
SOLUTION ENGINEER F5
Current Situation
| ©2019 F5
3
CUSTOMER
EXPERIENCE
BUSINESS
AGILITY
DIGITAL ROI
Enterprises are undergoing intense
digital transformation to drive business growth
| ©2019 F5
4
SUCCESS IS A FUNCTION OF VOLUME, SPEED, AND COST
CONFIDENTIAL
How efficiently can you deliver new products and services
to win, grow, and retain your customers?
Speed to Market
Volume
of
Successful
Deployments
/
Innovation
1000s
> Year Months Weeks Days Minutes
100s
10s
Your Company
Your Competitor
Amazon
“every 11.7 seconds, on average” with reduction in
both number and duration of outages
Relative Cost: Bubble Size
(Low-small, Medium, High-large)
Illustrative
Netflix
“thousands of times per day”
Nordstrom
“monthly” with fewer bugs
Facebook
“twice weekly”
Etsy
“more than 50 deployments a day with fewer disruptions”
Fidelity
“one to two hours” resulting in “easier to display regulatory compliance”
| ©2019 F5
5
“Facebook's accelerated development lifecycle continues to reshape consumers'
expectations of software. Its recently announced bi-weekly app updates
effectively served notice that constant, rapid refreshes for mobile apps are the
new normal, and any company that can't keep up risks getting left behind.”
─TechBeacon
CONFIDENTIAL
| ©2019 F5
6 CONFIDENTIAL
What’s stopping you from moving up and to the right?
Infrastructure Lock-In
Limits application portability across clouds
Security & Network Bottlenecks
Prevents agility and collaboration among roles
Tool Sprawl
Leads to complexity and higher costs
App Architecture Changes
As Devs and DevOps Apps move from virtualized
to container and microservices, can’t keep up
Poor/Lost App Visibility
Limited tools exist to manage governance across clouds
Line of Business Responsibility
As infrastructure services and ops decision-making
decentralized, lines of business have assumed
end-to-end ownership
NGINX Controller
| ©2019 F5
8 CONFIDENTIAL
• Meet NGINX Controller 3.0+: The First App-Centric,
Multi-Cloud Application Platform for Modern App Teams
| ©2019 F5
9 CONFIDENTIAL
• NGINX Controller 3.0+ helps empower enterprises to deliver
the same high-performance, connected experiences as digital innovators.
Respond with
Intelligent Insights To
Remediate Issues
and Maintain Uptime
Continuous Security
Aligned to Speed of
Modern Apps
Simplifies Code to
Customer Through
Automated
Configuration
Empower with
Self-Service Across
Teams
| ©2019 F5
10
NGINX Controller 3.0+ Built for Modern App Teams
CONFIDENTIAL
| ©2019 F5
11
Software Migration
CONFIDENTIAL
To help tackle your toughest challenges
API Management Modernizing Your Apps
Automate Your Pipeline
Want to reduce your app deployment time
from weeks to minutes?
Understand and Manage
Your App Portfolio
Need clear visibility into the number,
performance, and ownership costs of
your apps?
Empower Your Teams with
Self-Service
Aspire to improve collaboration across
your modern app teams to unleash their
productivity and efficiency?
Key Use Cases
Context
Public Cloud & Multi-Cloud
| ©2019 F5
12 CONFIDENTIAL
Key Innovations
Seamless NGINX
Plus Management
Automation-
Driven
Configuration API
App-Centric
User Interface
Self-Service
Portal
Modular, Cross-
Team Workflows
APP
Fastest, most
lightweight and
deployable across
more platforms
Automates services
deployment across
pipelines, reducing
overhead & complexity
Aligns configuration
and visibility to how
teams develop
applications
Delivers self-service to
line of business without
compromising
Enterprise-wide
compliance
Consolidates team
workflows and use
cases across ADC and
API Management
| ©2019 F5
13
NGINX ANALYTICS, APPLICATION DELIVERY CONTROLLER, API MANAGEMENT
Enterprise-Ready Application Services
CONFIDENTIAL
ADC Management
• Shared & Distributed Datapath Management
• URI Routing, SNI Routing, Cookie Persistence,
LB Methods, Backend Workload Health
Monitoring, Rewrites, Redirects, Header
Manipulation, TCP Socket Tuning, Proxy Tuning
• TCP/UDP load balancing
Visibility & Reporting
Verify health and performance to check the status of
applications and their hosts. Analytics Dashboards and
API Endpoint for Events and Measures
• Application centric end user performance reporting
• Per-API reporting
• Instance-based Metrics & Events
• Customizable dashboarding
• Infrastructure dashboarding
• NGINX Config Analyzer
Application & API Security
• Web Application Firewall (WAF) OWASP top 10
Protection
• False positive lifecycle management
• Application security dashboarding and reporting
• Authentication: JWT, API keys
• Rate limit throttling and burst support
• Conditional access policies (per-URI)
Automation-friendly via API
Provides APIs that enable automation and
orchestration of the applications and APIs published
through Controller, ensuring quality, consistency,
visibility, and improved operational efficiency.
API Management
Lifecycle Management
• API definitions version management
• Import from Swagger/OAS
(from file, copy/paste, or API)
• Publish one or more versions of each
API, optionally specify base path
• Drag and drop routing
Dev Portal (API Documentation)
• Modern, customizable Portal UI
• Manage Shared and Distributed Dev Portals
• Multi Application / Published / Version aware
interface
Robust Platform & Ecosystem
• AWS NGINX+ instance management
• Advanced Role Based Access Controls
• Active Directory Integration with Role Mapping
• Data forwarding to Splunk and Datadog
Certificate Management
Deploy, update, and decommission certs
• Certificate details can be easily viewed
• Certificate and keys can be easily associated with
applications
• PKCS12 (binary) or PEM (ASCII) format supported
when uploading certificates to Controller
• Count of certificates expiring within 30 days and 31-
60 days available
| ©2019 F5
14
Demo
| ©2019 F5
15
Demo
main
back
end
refer
transfer
NGINX Controller
arcadia-finance.io
NGINX Instance Manager
| ©2019 F5
17
#1 97%
Source: NGINX User survey 2020
Source: Netcraft June 2020 Web Server Survey
“Most websites use NGINX” of NGINX deployments
use NGINX open source
| ©2019 F5
18
Make NGINX even
simpler to
configure, scale
and maintain
| ©2019 F5
19
Simplicity
• Configure and maintain NGINX instances at scale
• Reads existing conf files
• Works with your existing configurations, tools and processes.
• Top stats/score
• API First Focus
• Metrics provided in Prometheus Query Language
Find and Secure instances
• Scan utilizing stealth ports and tagging
• CVE vulnerability and outdated version information
• Near expired certificates (coming soon)
Configuration Management
• Centralized Validation
• Analysis and Suggestions
• Lightweight UI for inventory management
• Rollback and change alerting (coming soon)
• Template code and publish to multiple instances (coming soon)
Overview
NGINX INSTANCE MANAGER
| ©2019 F5
20
Key Capabilities
API for NGINX
Instance Discovery and
Scanning
Simple Linux service
and Package Install
Compatibility with
existing tools
Configuration
Management
External Metrics/Alerts
| ©2019 F5
21

NGINX Controller: faster deployments, fewer headaches

  • 1.
  • 2.
  • 3.
    | ©2019 F5 3 CUSTOMER EXPERIENCE BUSINESS AGILITY DIGITALROI Enterprises are undergoing intense digital transformation to drive business growth
  • 4.
    | ©2019 F5 4 SUCCESSIS A FUNCTION OF VOLUME, SPEED, AND COST CONFIDENTIAL How efficiently can you deliver new products and services to win, grow, and retain your customers? Speed to Market Volume of Successful Deployments / Innovation 1000s > Year Months Weeks Days Minutes 100s 10s Your Company Your Competitor Amazon “every 11.7 seconds, on average” with reduction in both number and duration of outages Relative Cost: Bubble Size (Low-small, Medium, High-large) Illustrative Netflix “thousands of times per day” Nordstrom “monthly” with fewer bugs Facebook “twice weekly” Etsy “more than 50 deployments a day with fewer disruptions” Fidelity “one to two hours” resulting in “easier to display regulatory compliance”
  • 5.
    | ©2019 F5 5 “Facebook'saccelerated development lifecycle continues to reshape consumers' expectations of software. Its recently announced bi-weekly app updates effectively served notice that constant, rapid refreshes for mobile apps are the new normal, and any company that can't keep up risks getting left behind.” ─TechBeacon CONFIDENTIAL
  • 6.
    | ©2019 F5 6CONFIDENTIAL What’s stopping you from moving up and to the right? Infrastructure Lock-In Limits application portability across clouds Security & Network Bottlenecks Prevents agility and collaboration among roles Tool Sprawl Leads to complexity and higher costs App Architecture Changes As Devs and DevOps Apps move from virtualized to container and microservices, can’t keep up Poor/Lost App Visibility Limited tools exist to manage governance across clouds Line of Business Responsibility As infrastructure services and ops decision-making decentralized, lines of business have assumed end-to-end ownership
  • 7.
  • 8.
    | ©2019 F5 8CONFIDENTIAL • Meet NGINX Controller 3.0+: The First App-Centric, Multi-Cloud Application Platform for Modern App Teams
  • 9.
    | ©2019 F5 9CONFIDENTIAL • NGINX Controller 3.0+ helps empower enterprises to deliver the same high-performance, connected experiences as digital innovators. Respond with Intelligent Insights To Remediate Issues and Maintain Uptime Continuous Security Aligned to Speed of Modern Apps Simplifies Code to Customer Through Automated Configuration Empower with Self-Service Across Teams
  • 10.
    | ©2019 F5 10 NGINXController 3.0+ Built for Modern App Teams CONFIDENTIAL
  • 11.
    | ©2019 F5 11 SoftwareMigration CONFIDENTIAL To help tackle your toughest challenges API Management Modernizing Your Apps Automate Your Pipeline Want to reduce your app deployment time from weeks to minutes? Understand and Manage Your App Portfolio Need clear visibility into the number, performance, and ownership costs of your apps? Empower Your Teams with Self-Service Aspire to improve collaboration across your modern app teams to unleash their productivity and efficiency? Key Use Cases Context Public Cloud & Multi-Cloud
  • 12.
    | ©2019 F5 12CONFIDENTIAL Key Innovations Seamless NGINX Plus Management Automation- Driven Configuration API App-Centric User Interface Self-Service Portal Modular, Cross- Team Workflows APP Fastest, most lightweight and deployable across more platforms Automates services deployment across pipelines, reducing overhead & complexity Aligns configuration and visibility to how teams develop applications Delivers self-service to line of business without compromising Enterprise-wide compliance Consolidates team workflows and use cases across ADC and API Management
  • 13.
    | ©2019 F5 13 NGINXANALYTICS, APPLICATION DELIVERY CONTROLLER, API MANAGEMENT Enterprise-Ready Application Services CONFIDENTIAL ADC Management • Shared & Distributed Datapath Management • URI Routing, SNI Routing, Cookie Persistence, LB Methods, Backend Workload Health Monitoring, Rewrites, Redirects, Header Manipulation, TCP Socket Tuning, Proxy Tuning • TCP/UDP load balancing Visibility & Reporting Verify health and performance to check the status of applications and their hosts. Analytics Dashboards and API Endpoint for Events and Measures • Application centric end user performance reporting • Per-API reporting • Instance-based Metrics & Events • Customizable dashboarding • Infrastructure dashboarding • NGINX Config Analyzer Application & API Security • Web Application Firewall (WAF) OWASP top 10 Protection • False positive lifecycle management • Application security dashboarding and reporting • Authentication: JWT, API keys • Rate limit throttling and burst support • Conditional access policies (per-URI) Automation-friendly via API Provides APIs that enable automation and orchestration of the applications and APIs published through Controller, ensuring quality, consistency, visibility, and improved operational efficiency. API Management Lifecycle Management • API definitions version management • Import from Swagger/OAS (from file, copy/paste, or API) • Publish one or more versions of each API, optionally specify base path • Drag and drop routing Dev Portal (API Documentation) • Modern, customizable Portal UI • Manage Shared and Distributed Dev Portals • Multi Application / Published / Version aware interface Robust Platform & Ecosystem • AWS NGINX+ instance management • Advanced Role Based Access Controls • Active Directory Integration with Role Mapping • Data forwarding to Splunk and Datadog Certificate Management Deploy, update, and decommission certs • Certificate details can be easily viewed • Certificate and keys can be easily associated with applications • PKCS12 (binary) or PEM (ASCII) format supported when uploading certificates to Controller • Count of certificates expiring within 30 days and 31- 60 days available
  • 14.
  • 15.
  • 16.
  • 17.
    | ©2019 F5 17 #197% Source: NGINX User survey 2020 Source: Netcraft June 2020 Web Server Survey “Most websites use NGINX” of NGINX deployments use NGINX open source
  • 18.
    | ©2019 F5 18 MakeNGINX even simpler to configure, scale and maintain
  • 19.
    | ©2019 F5 19 Simplicity •Configure and maintain NGINX instances at scale • Reads existing conf files • Works with your existing configurations, tools and processes. • Top stats/score • API First Focus • Metrics provided in Prometheus Query Language Find and Secure instances • Scan utilizing stealth ports and tagging • CVE vulnerability and outdated version information • Near expired certificates (coming soon) Configuration Management • Centralized Validation • Analysis and Suggestions • Lightweight UI for inventory management • Rollback and change alerting (coming soon) • Template code and publish to multiple instances (coming soon) Overview NGINX INSTANCE MANAGER
  • 20.
    | ©2019 F5 20 KeyCapabilities API for NGINX Instance Discovery and Scanning Simple Linux service and Package Install Compatibility with existing tools Configuration Management External Metrics/Alerts
  • 21.