DevCentral ICYMI - August 2024

DevCentral publishes new content constantly, and it’s easy to miss the latest from F5’s technical user community with all that turnover. So here’s a monthly round-up of DevCentral news, content, and events—in case you missed it!

New and Notable

• SAVE THE DATE: AppWorld 2025 - Feb 25–27 in Las Vegas!

Content Round-Up

AppSec News:

• (Didn't)KnowBe4, (In)Secure Boot, 91Won't, and, of course, CrowdStrike
• DigiCert DCV issue, Sitting Ducks and more - This Week In Security
• DEF CON & AMD Sinkclose
• Windows Critical RCE Vulnerability, Malicious Solana-py, and EDRKillShifter
• Chrome zero-day fix MS Copilot Log4Shel still being exploited

Threat Research:

• What Are Scrapers and Why Should You Care? - Learn about Scrapers, automated tools designed to extract data from websites and APIs for various purposes, posing significant threats to organizations of all sizes. Jesse Smith

BIG-IP Next:

• Installing BIG-IP Next on Nutanix Community Edition - Bring up a BIG-IP Next Central Manager and BIG-IP Next virtual machine in a Nutanix CE environment. Eric Chen
• Streamlining BIG-IP NEXT Deployments: Automate with CI/CD Pipelines Using Terraform Cloud and GitHub - Any changes made in your GitHub repository automatically trigger Terraform Cloud to deploy the updated configurations to your BIG-IP NEXT instance via the BIG-IP NEXT Central Manager. Sanjay Shitole
• iRules variables in BIG-IP Next: behavior change - See how iRules behavior will change for BIG-IP Next. Jason Rahm

F5 Distributed Cloud:

• F5 Distributed Cloud (XC) Global Applications Load Balancing in Cisco ACI Deploy F5 XC in Cisco ACI to securely deploy and load balance global applications across ACI sites (and public clouds). Jennifer Yeung Matt Harmon
• F5 Distributed Cloud Customer Edge on F5 rSeries – Reference Architecture - See how to deploy a Customer Edge site on F5 rSeries hardware. Bhushan Pai Kayvan Farzaneh
• VIPTest: Rapid Application Testing for F5 Environments - Check out VIPTest - a tool designed as a convenience for anyone considering moving their applications from a different vendor solution (e.g., Citrix NetScaler) to F5. Tony Marfil
• HTTPS Routing based on Client Certificates values with F5 Distributed Cloud - Want to use Client Certificates to authorize and route traffic to different destinations? This article can help you identify how to do it with F5 Distributed Cloud HTTP LB, XFCC, and Header Insert/Remove. Philippe C.

NGINX:

• Automating NGINX Certificate Rotation on AWS - Two ways to connect AWS Secrets Manager and NGINX to help with TLS certificate rotation in a scalable way. Leon Seng
• Powering Progressive Deployment in Kubernetes with NGINX and Argo Rollouts - Use Argo and NGINX to make your application deployments better and faster in Kubernetes. Daniel Edgar
• Announcing F5 NGINX Gateway Fabric 1.3.0 with Tracing, GRPCRoute, and Client Settings - Get the latest on this new update. Mike Stefaniak
• What is Message Queue Telemetry Transport (MQTT)? How to secure MQTT? - Learn how to use NGINX to secure MQTT. Fouad Chmainy
• Securing and Scaling Hybrid Apps with F5 NGINX Part 4 - A reference architecture that replicates a Kubernetes cluster with an NGINX Ingress Controller deployment and NGINX Load Balancer with HA (High Availability). Amir Rawdat

BIG-IP:

• Transparent load balancing in Azure, Part 2 - An advanced configuration of F5 BIG-IP behind Azure LB when running in Active/Standby mode and using the Floating IP option for forwarding traffic. Michael O'Leary
• Using Tcl packages in iRules - Learn how to convert Tcl packages to an iRules-compliant procs library. Jason Rahm
• OWASP Tactical Access Defense Series: Broken Function Level Authorization (BFLA) - In this article, we are going through API5 item from OWASP Top 10 API Security risks and exploring F5 BIG-IP Access Policy Manager (APM) as a role in our arsenal. Mohamed Mahdy

DevCentral Visits

• Jason Rahm and Aubrey King take on Black Hat 2024 in Las Vegas! Check out their videos from the event floor.
• Fortifying the flow: safeguarding our water supply from cyber threats - Imagine a world where water no longer flows from your tap. Jason Rahm talks about securing our water supply from a city in the middle of a desert.

About DevCentral

DevCentral is a F5 community of technical users dedicated to learning, exchanging ideas, and solving problems—together.?Join us to share F5 technology and application security best practices.