|
1 | 1 | Configure BIG-IP for Local API Discovery |
2 | 2 | ======================================== |
3 | 3 |
|
4 | | -There are multiple options to do Rate Limiting in F5XC. In this lab, we are focusing on API Protection Rate Limiting. |
| 4 | +Now, we must configure the BIG-IP to collect the datas, format the datas, and send the datas to the LAD server. |
5 | 5 |
|
6 | | -The goal is to rate limit an endpoint at risk because we discovered an attack or it is a shadow API and we are not sure if we should allow or block it. |
| 6 | +There is a how-to into the LAD Console for TMUI, iControl REST and TMSH. |
| 7 | + |
| 8 | +Click on ``Integration`` > ``Integration Guide`` |
| 9 | + |
| 10 | +.. image:: ../pictures/integration1.png |
| 11 | + :align: left |
| 12 | + :scale: 50% |
| 13 | + |
| 14 | +You can see how it works and how it is interconnected. |
| 15 | + |
| 16 | +In a nutshell, an irule attached to the API Application Virtual Server is collecting the requests and responses, formating the datas and send those datas to a pool where the LAD is a member. |
| 17 | + |
| 18 | + |
| 19 | +Configure the BIG-IP via the TMUI |
| 20 | +--------------------------------- |
| 21 | + |
| 22 | +Configure the Pool |
| 23 | +^^^^^^^^^^^^^^^^^^ |
| 24 | + |
| 25 | +* Go to Local Traffic -> Pools and Create a new External pool for LAD Collector (logging-node-tls). |
| 26 | +* Pool member port must be ``6514`` |
| 27 | + |
| 28 | +.. image:: ../pictures/pool_list.png |
| 29 | + :align: left |
| 30 | + :scale: 50% |
| 31 | + |
| 32 | +Configure the Internal VS |
| 33 | +^^^^^^^^^^^^^^^^^^^^^^^^^ |
| 34 | + |
| 35 | +* Configure a VS (type Internal) named ``syslog-tls-virtual`` |
| 36 | +* With service port ``6514`` |
| 37 | +* Server SSL Profile : ``serverssl`` |
| 38 | +* Pool : logging-node-tls (created in the previous step) |
7 | 39 |
|
8 | | -Enable Rate Limiting from the Security Dashboard |
9 | | ------------------------------------------------- |
10 | 40 |
|
11 | 41 |
|
12 | 42 | Test your Rate Limiting config |
|
0 commit comments