Training offering

Developing iRules for BIG-IP

Information

Price £2,495 before tax
Length: 3 Days
Lunch : Included
Courseware : Included
Course code: F5N_BIG-IRULE-CFG
Delivery Type

Session dates

Date Location
  • Chertsey
    £2,495 before tax
  • London - Dowgate Hill
    £2,495 before tax
  • Virtual Classroom (GMT / UTC)
    £2,495 before tax
  • London - Dowgate Hill
    £2,495 before tax
  • Virtual Classroom (GMT / UTC)
    £2,495 before tax
  • London - Dowgate Hill
    £2,495 before tax
  • Virtual Classroom (GMT / UTC)
    £2,495 before tax
  • London - Dowgate Hill
    £2,495 before tax
  • Virtual Classroom (GMT / UTC)
    £2,495 before tax
This training is also available as onsite training. Feel free to contact us for more information.

Description

This 3 day course provides networking professionals a functional understanding of iRules development.


The course builds on the foundation of the Administering BIG-IP course, demonstrating how to logically plan and write iRules to help monitor and manage common tasks involved with processing traffic on the BIG-IP system. Extensive course labs consist of writing, applying and evaluating the effect of iRules on local traffic.


This hands-on course includes lectures, labs, and discussions.

Objectives

Topics covered in this course include:


• Setting up the BIG-IP system
• Getting started with iRules
• Using the iRules Editor
• Leveraging DevCentral resources for iRule development
• Exploring iRule elements, including events, functions, commands, variables, and operators
• Using control structures for conditional branching and looping
• Mastering whitespace, grouping, and special symbols
• Testing and troubleshooting iRules
• Logging from an iRule using syslog-ng and high-speed logging (HSL)
• Optimizing iRules execution, including implementing efficiency best practices
• Modularizing iRules for administrative efficiency, including using procedures
• Securing web applications with iRules, including preventing common HTTP attacks, securing HTTP headers and cookies, and implementing strict transport security (HSTS)
• Working with strings, including using Tcl parsing commands and iRules parsing functions
• Accessing and manipulating HTTP traffic, including applying selective HTTP compression
• Working with iFiles and data groups
• Using iRules with universal persistence and stream profiles
• Gathering statistics using a statistics profile and STATS commands, and iStats
• Incorporating advanced variables, including arrays, static variables, and the session table

Participants

This course is intended for system administrators, network administrators and application developers responsible for the customization of traffic flow through a BIG-IP system.

Prerequisite(s)

Students must complete one of the following F5 prerequisites before attending this course:


•    Administering BIG-IP instructor-led course
•    Configuring BIG-IP LTM instructor-led course
•    F5 Certified BIG-IP Administrator


IMPORTANT INFORMATION:


F5 US has brought out a BIG-IP Admin exam which can be taken before attending the LTM course.  Indeed, this test should be taken by anyone wanting to attend any of the F5 specialist classes (DNS, APM, ASM, AFM etc.) if they have not attended the BIG-IP Admin or LTM class.


Although this is not mandatory, F5 would like to stress the importance of anyone attending F5 specialist classes if they have not attended an Admin class or passed the test below with 70% or greater.  Obviously, a 201 BIG-IP Administrator exam certification is an instant prerequisite.


 
Step 1: get an account on F5 University (https://university.f5.com)



 
Step 2: goto: https://wbt.training.f5.com/wbt/go?id=2110


Take the test.  Pass mark is 70%.



Step 3: take a screen shot as proof of your results.


Please note that if this prerequisite is not met, Arrow ECS reserves the right to refuse entry to the class without refund.


The following free web-based courses, although optional, will be very helpful for any student with limited BIG-IP administration and configuration experience:


•    Getting Started with BIG-IP web-based training
•    Getting Started with BIG-IP Local Traffic Manager (LTM) web-based training


The following general network technology knowledge and experience are recommended before attending any F5 Global Training Services instructor-led course:


•    OSI model encapsulation
•    Routing and switching
•    Ethernet and ARP
•    TCP/IP concepts
•    IP addressing and subnetting
•    NAT and private IP addressing
•    Default gateway
•    Network firewalls
•    LAN vs. WAN


The following course-specific knowledge and experience is suggested before attending this course:


•    HTTP protocol
•    Any programming language

Programme

Chapter 1: Setting Up the BIG-IP System



• Introducing the BIG-IP System
• Initially Setting Up the BIG-IP System
• Archiving the BIG-IP System Configuration
• Leveraging F5 Support Resources and Tools
• Chapter Resources
• BIG-IP System Setup Labs



Chapter 2: Getting Started with iRules



• Customizing Application Delivery with iRules
• Triggering an iRule
• Leveraging the DevCentral Ecosystem
• Using the F5 iRule Editor
• Assigning and Testing iRules



Chapter 3: Exploring iRule Elements



• Introducing iRule Constructs
• Understanding iRule Events and Event Context
• Working with iRule Commands
• Logging from an iRule Using SYSLOG-NG


LOG
• Working with User-Defined Variables
• Working with Operators and Data Types
• Working with Control Structures


IF-ELSEIF-ELSE
SWITCH
• Incorporating Best Practices in iRules



Chapter 4: Developing and Troubleshooting iRules



• Mastering Whitespace and Special Symbols
• Developing and Troubleshooting Tips
• Using Fiddler to Test and Troubleshoot iRules



Chapter 5: Optimizing iRule Execution



• Understanding the Need for Efficiency
• Measuing iRule Runtime Efficiency
• Modularizing for Administrative Efficiency
• Using Procedures to Modularize Code
• Optimizing Logging
• Using High-Speed Logging Commands in an iRule
• Implementing Other Efficiency Recommendations
• Using Looping Control Structures (Iteration)


WHILE
FOR
FOREACH



Chapter 6: Securing Web Applications with iRules



• Integrating iRules into Web Application Defense
• Preventing Common HTTP Attacks


Mitigating HTTP Version Attacks
Mitigating Path Traversal Attacks
Using iRules to Defend Against Cross-Site Request Forgery (CSRF)
Mitigating HTTP Method Vulnerabilities
Securing HTTP Cookies with iRules
Adding HTTP Security Headers
            X-Frame-Options
            X-XSS-Protection
            X-Content-Type-Options
            Strict-Transport-Security
Removing Undesirable HTTP Headers



Chapter 7: Working with Numbers and Strings



• Understanding Number Forms and Notation
• Working with Strings


Parsing Strings
 STRING TOLOWER | TOUPPER
 STRING LENGTH
 STRING MAP
 STRING RANGE
 STRING FIRST | LAST
 SCAN
Combining Strings
 Combining Strings with Adjacent Variables
 CONCAT
 APPEND
iRule String Parsing Functions
 FINDSTR
 GETFIELD
 SUBSTR



Chapter 8: Processing the HTTP Payload



• Reviewing HTTP Headers and Commands
• Accessing and Manipulating HTTP Headers
• Parsing the HTTP URI
• Selectively Compressing HTTP Data



Chapter 9: Working with iFiles and Data Groups



• Working with iFiles
• Introducing Data Groups
• Working with Old Format Data Groups (Classes)


MATCHCLASS
FINDCLASS
• Working with New Format Data Groups


Creating an Internal Data Group
Creating an External Data Group
CLASS MATCH
CLASS SEARCH
CLASS Command Options
Other CLASS Commands



Chapter 10: Using iRules with Universal Persistence, Stream, and Statistics Profiles



• Implementing Universal Persistence


PERSIST UIE
• Working with the Stream Profile


STREAM
• Gathering Custom Statistics from an iRule


Collecting Statistics Using a Statistics Profile
 Configuring a Statistics Profile
 STATS
 Viewing iRule-Collected Statistics
Collecting Statistics Using iStats
 ISTATS



Chapter 11: Working with Advanced Variables



• Reviewing the Local Variable Namespace
• Working with Arrays


ARRAY
 Building a Static Array
 Accessing a Specific Key's Value
 Building a Dynamic Array
 Looping Through an Array
• Using Static and Global Variables
• Using the Session Table


 

Options

Would you like additional access to F5 labs after you have attended your training course?



 



Arrow Education has just launched a new lab access and support offering.



 



Please click here for more details or call 0870 251 1000.


© 2018 Qual - Arrow ECS. All rights reserved.