Complete F5 BIGIP 16.1 Bootcamp (LTM,ASM,DNS) P1 -TMOS & LTM

Explore the traffic processing infrastructure of the F5 BIG-IP LTM module, including nodes, pools, pool members, and virtual servers, plus monitors, load balancing, profiles, and irules.

Demonstrates end-to-end traffic flow from clients to F5 Big-IP through a 1440 gateway to backend web servers, configuring nodes, a HTTP pool, and a virtual server with round-robin load balancing.

Explore configuring nodes in f5 big-ip, defining by ip or fqdn with dns resolution, applying node-specific or default monitors, and understanding node statuses, ratio, and limits for static load balancing.

Define a pool with a health monitor and service monitor for the service port. Set a load balancing method and enable priority group activation for fault tolerance.

Demonstrate configuring a priority activation group in a BIG-IP pool by assigning priorities to members, triggering failover when a high-priority member fails, and verifying traffic distribution.

Learn how virtual servers on f5 big-ip receive client requests and connect modules like ltm, asm, and apm. Review common types and configuration, pools, profiles, and nat.

Explore the standard virtual server in full proxy mode, comparing forward and reverse proxies with packet captures, tcpdump, and Wireshark to trace client to back-end communications.

Explore performance layer 4 virtual servers on F5 Big-IP, using fast profile, auto map translation, and port-based pool signaling; compare with forwarding IP virtual servers and packet captures.

Explore static and dynamic load balancing methods for pool members, including round robin, ratio, fastest, least connections, and persistence-based least sessions; understand observe-based and predictive dynamic ratio for high availability.

Explain destination nat and source nat on F5 Big-IP LTM, detailing auto map, egress vlan floating IP, and pool member translation for load balancing.

Analyze nat behavior with Wireshark by capturing client and server traffic to observe automap and destination net translations on F5 Big-IP. Explore source nat pool usage and static methods.

Explore how monitors verify back-end health to decide node participation in load balancing; apply active, passive, and simple monitoring to nodes, pools, and pool members.

Create and customize a HTTP monitor in BIG-IP, configure interval and timeout, use IP host and root URI, verify 200 ok, and apply monitors at node and pool levels.

Configure persistence profiles on F5 BIG-IP to bind clients to a single pool member using cookie or IP persistence, apply to the virtual server, and verify via local traffic statistics.

Demonstrate persistence in F5 Big-IP using source address affinity and cookie persistence. Create and apply persistence profiles, set a 30-second timeout, and verify persistence records on the virtual server.

Explore SSL termination and interception on the F5 Big-IP, including client and server SSL profiles, certificates, and how TLS tunnels secure traffic between clients and back-end servers.

Demonstrates configuring client and server SSL profiles for encrypted traffic between F5 Big-IP and a back-end IIS server, using certificates, CSR, and an internal CA.

Discover how to back up and restore F5 Big-IP TMOS using UCS archives in var local UCS, including private keys, encrypted with a passphrase, and restored via CLI with tmsh.

Implement high availability between two F5 Big-IP appliances by configuring an active-passive pair, VLAN connectivity, config sync, failover networks, and device trust, with synchronization and traffic group setup.

Configure high availability between two f5 big-ip appliances by backing up configurations, establishing device trust, configuring config sync and failover groups, and setting traffic group order for automatic sync.

Learn to update F5 Big-IP TMOS by syncing and backing up keys, disabling automatic sync, taking standby offline, importing upgrade ISO, upgrading standby first, then failing over and testing traffic.

Perform a zero-downtime software update on a F5 BIG-IP cluster by upgrading the standby node first, then failover to validate traffic on the new version before updating the active node.

Explore advanced high availability and failover using health score and ha group, with minimum active members in pools to determine the active node, and enable failsafe to prevent traffic loss.

Configure a three-member web pool ha group with health checks, triggering failover to the standby node when active members fall, and ensure per-node configuration and pool group alignment.

Implement VLAN-level failsafe in F5 BIG-IP, configure failsafe triggers, and test failover by disabling the VLAN's switch interface to verify automatic failover between online and active nodes.

Explore iRules, the TCL scripting for F5 BIG-IP, to control traffic via event-driven rules and perform HTTP to HTTPS redirection, host header changes, and payload edits via stream profiles.

Implement http to https redirection on F5 BIG-IP by creating http and https virtual servers and an iRule that redirects http requests to https.

Implement a general redirection on the F5 BIG-IP to map client.local to server.local, switch from http to https, and route to the PHP action site.

Create a stream profile and a replacement rule to modify server-to-client payloads via http response, replacing domains such as www.f5.com with a new target like www.google.com.

Explore how LTM policies manipulate HTTP requests and responses using the configuration utility, consisting of rules with conditions and actions, defined in draft mode and published to a virtual server.

Create and publish an ltm policy to redirect specific http requests to external sites, using http uri and host conditions, and test with wireshark.

Explore how F5 Big-IP LTM integrates with an ICAP server (1440 proxy) via ICAP protocol, using virtual servers, ICAP profiles, and a DLP policy to inspect HTTP requests and responses.

Learn to configure F5 Big-IP ICAP with a FortiProxy 1440 proxy, creating an ICAP service, pool, and internal virtual server, and applying a DLP profile to block credit card data.

Explore how to create administrative partitions and link them to root domains to isolate network traffic in F5 Big-IP, manage objects within partitions, and apply strict isolation across routing domains.

Create a route domain within a partition by defining a remote branch root domain, VLANs, and self IPs, deploy a web virtual server, and test connectivity over a layer-two network.

Explore F5 OS and the new R-series and Velos platforms, built on Kubernetes, hosting F5 BIG-IP tenants as containers, with LAGs, VLANs, and image-based deployment.