DevCentral ICYMI - July 2024

DevCentral publishes new content constantly, and it’s easy to miss the latest from F5’s technical user community with all that turnover. So here’s a monthly round-up of DevCentral news, content, and events—in case you missed it!

New and Notable

• Buu Lam appears on RunAs Radio podcast to talk about NGINX as a Service!
• Async and ISYSWASFA – Ep 9 – WebAssembly Unleashed - Join Fermyon’s Joel Dice to dive deeper into ISYSWASFA, async, and WebAssembly.

Content Round-Up

AI and LLM:

• Secure, Deliver and Optimize Your Modern Generative AI Apps with F5 - A robust AI initiative requires solid groundwork. Learn how to build that foundation with F5 Distributed Cloud. Foo-Bang Chan

AppSec:

• OWASP Resources for Security Education and Training - A guide to give security engineer trainees hands-on experience of exploiting vulnerabilities. Kouichi Toriumi
• Inspecting a UCS file from a compromised BIG-IP - Helpful info for customers experiencing a compromised F5 BIG-IP or are looking to examine their UCS files for compromise after a breach or ransomware attack. Kyle Fox
• WAF evasion techniques for Command Injection - Let’s talk about Command Injection in the context of Web Application Firewalls (like BIG-IP Advanced WAF, BIG-IP Next WAF, F5 Distributed Cloud WAF, etc.) Aaron Brailsford

This Week in Security from F5 SIRT:

• Midnight Blizzard, Polyfill.io and cyber workforce, June 23rd – 29th - This Week In Security
• GitLab Vulnerability, Secure by Design Pledge, & Near Miss Supply Chain Attack
• Ransomware attack in Japan, Darkweb report, June 30th – July 7th - This Week In Security
• CrowdStrike Struck, PHP CVEs, Race to Exploitation Mountain and KEVs

BIG-IP Next:

• Getting Started with BIG-IP Next: Creating Instances in Central Manager with the VMware vSphere Provider - You can create instances directly on F5 rSeries or VELOS hardware or on KVM or VMware hypervisors, and then onboard them in BIG-IP Next Central Manager (CM), some of which is already covered in other articles that we've released. Jason Rahm
• Installing BIG-IP Next on Proxmox - Learn how to install BIG-IP Next on Proxmox in my home lab. Eric Chen

F5 Distributed Cloud:

• F5 Distributed Cloud Customer Edge Migration Centos to RHEL - An introduction to a process that migrates a Customer Edge site from End of Life Centos OS to RHEL Operating System.?Steve Iannetta and Matt Harmon
• Configure Generic Webhook Alert Receiver using F5 Distributed Cloud Platform - Learn how to use F5 Distributed Cloud (XC) provides the feasibility to configure Webhook to send alert notifications related to Infrastructures, deployments etc. to the clients. Chaithanya Dileep
• F5 Distributed Cloud, from manual configuration to Terraform automation - Part of a mini-series on traffic flows in F5 Distributed Cloud. This first article starts with the Regional Edge (RE) SaaS data plane of F5 Distributed Cloud. Valentin Tobi
• Customer-driven Site Deployment Using AWS and F5 Distributed Cloud Terraform Modules - F5 Distributed Cloud Mesh’s Secure Networking provides connectivity and security services for your applications running on the Edge, Private Clouds, or Public Clouds. Christian Klewar , Nicolas Menant
• F5 Distributed Cloud Network Firewall Rule Evaluation and Packet Flow - F5 Distributed Cloud (XC) Network Firewall allows users to specify the intent and abstract the network topologies and address assignments. Bhushan Pai
• Residential and Mobile Proxy Networks – The good and the not-so-good! - Understand how the same technologies that enhance privacy can also be misused for cyberattacks. Udo Gustavo von Blücher
• Automate NetApp ONTAP Storage Management with Private and Secure API Governance - See tactical use cases for surrounding ONTAP API transactions, regardless of on-premises or public cloud-based form factors, with security by private communications and deep API-layer visibility and controls.? Steve Gorman
• Site-to-Site Connectivity in F5 Distributed Cloud Network Connect – Reference Architecture - This guide describes the reference architecture for deploying F5 Distributed Cloud’s (XC) Multicloud Network Connect service to interconnect their workload across private connectivity or the internet. Bhushan Pai
• The Business Partner Exchange - An F5 Distributed Cloud Services Demonstration - Learn how using F5 Distributed Cloud Services (XC) with Equinix can address challenges with deploying applications at scale. Gregory Coward
• How to use F5 Distributed Cloud for API Discovery - Learn how to visualize API usage with F5 Distributed Cloud. Garland Moore
• Automate Multicloud Networking w/ Terraform: routing and app connect on F5 Distributed Cloud - Learn how using automation with F5 Distributed Cloud can deploy infrastructure, connect an app, secure it, and deliver it with services running in multiple public cloud environments. Dave Potter

NGINX:

• Safeguard your Apps and APIs using NGINX App Protect WAF 5.0 - Discover the latest features of NGINX App Protect 5.X and learn how it can secure your applications and APIs by checking out this article and demo video. Akash Ananthanarayanan

BIG-IP:

• Access Troubleshooting: BIG-IP APM OIDC integration - A guide to troubleshooting Acccess use cases. These use cases can be challenging due to the interconnected components used to achieve such use cases. Mohamed Mahdy

About DevCentral

DevCentral is a F5 community of technical users dedicated to learning, exchanging ideas, and solving problems—together.?Join us to share F5 technology and application security best practices.