If you missed our initial issue of the DC Chronicles, check
it out here. The Chronicles are intended to keep you updated on DevCentral
happenings and highlight some of the cool articles you may have missed over the
last month. Welcome.
First up, 2018 will be the year that we
publicly open up speaking proposals for our Agility conference this August.
Historically, the presenters have been F5 employees or partners but this year,
we’d love if you wanted to share your BIG-IP expertise, knowledge and mad-skillz
to the greater F5 community. Review
the info here and submit your proposal by Friday, Feb 9.
Next up is our exciting new (and FREE!) Super-NetOps training
program. The Super-NetOps curriculum teaches BIG-IP administrators how to
standardize services and provide them through automation tool chains. For
Network Operations Engineers you can learn new skills, improve collaboration and
advance your career. For Network Managers and Architects, you can support
digital transformation and improve operational practices. As Jason Rahm notes with his Lightboard
Lessons: Why Super-NetOps, Super-NetOps is not a technology but an
evolutionary journey. Already featuring two complete classes on integrating
NetOps expertise into the benefits of a DevOps world, this training program is
poised to help the NetOps professional take a well-deserved seat at the
continuous deployment table. I’ve taken the training and it is
amazing.
Speaking of Lightboard
Lessons, John Wagnon is
going through the OWASP TOP
10 in his latest series and is already on number 5 of the list, Lightboard
Lessons: OWASP Top 10 - Broken Access Control. The OWASP Top
10 is a list of the most common security risks on the Internet today and
John has been lighting up each in some cool videos. If you want to learn about
the OWASP TOP 10, start here and follow along.
Interested in BIG-IP security? Then check out Chase Abbot’s Security
Hardening F5's BIG-IP with SELinux. When a major release hits the street,
documentation and digital press tends to focus on new or improved user features,
seldom do underlying platform changes make the spotlight. Each BIG-IP release
have plenty new customer-centric features but one unsung massive update is
SELinux’s extensive enforcing mode policy across the architecture. Chase says
that, BIG-IP and SELinux are no strangers, having coexisted since 2009, but
comparing our original efforts to our current SELinux implementation is akin to
having your kid's youth soccer team shoot penalties against David Seaman. Good
one.
Also filed under security for this edition is the Meltdown
and Spectre Web Application Risk Management article by Nir Zigler. Nir talks about a
simple setting that can reduce the attack surface with the “SameSite” Cookie
Attribute. If you’re worried about those vulnerabilities, this is your
article.
This week, I’ll be at the F5 AFCEA West Tech
Day on Wednesday Feb. 7 as part of the AFCEA West 2018 Conference in San
Diego. A full day of technical sessions covering the challenges of DoD cloud
adoption with a fun Capture the Flag challenge. Our friends at Microsoft Azure
will also talk about solutions to address the complex requirements of a secure
cloud computing architecture. There is a great article over on MSDN explaining
how to Secure
IaaS workloads for Department of Defense with Microsoft and F5.
#whereisdevcentral
Lastly, don’t forget to check out our Featured
Member for February, Lee Sutcliffe, Lori’s take on #SOAD The
State of Application Delivery 2018: Automation is Everywhere and the new F5
Editor Eclipse Plugin v2 which allows you to use the Eclipse IDE to manage
iRules, iRules LX, iControl LX, and iApps LX development.
You can stay engaged with @DevCentral by following us on Twitter, joining our
LinkedIn Group or
subscribing to our YouTube
Channel. Look forward to hearing about your BIG-IP adventures.
ps
Tuesday, February 6, 2018
The DevCentral Chronicles Volume 1, Issue 2
Labels:
afcea,
agility,
big-ip,
devcentral,
f5,
soad,
supernetops
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment