F5 Azure ARM templates

Introduction

Welcome to the GitHub repository for F5's ARM templates for Azure deployments. All of the templates in this repository have been developed by F5 Networks engineers. Across all branches in this repository, there are two directories: f5_supported and experimental

• supported
  The supported directory contains Azure ARM templates that have been created and fully tested by F5 Networks. These templates are fully supported by F5, meaning you can get assistance if necessary from F5 Technical Support via your typical methods.

• experimental
  The experimental directory also contains ARM templates that have been created by F5 Networks. However, these templates have not completed full testing and are subject to change. F5 Networks does not offer technical support for templates in the experimental directory, so use these templates with caution.

Template information

Descriptions for each template are contained at the top of each template in the Description key. For additional information, including how the templates are generated, and assistance in deploying a template, see the individual README.md file in the individual template directory.

Matrix for tagged releases

F5 has created a matrix that contains all of the tagged releases of the F5 ARM templates for Microsoft Azure and the corresponding BIG-IP versions, license types and throughputs available for a specific tagged release. See matrix.

CVE-2017-6168 information

If you have launched an F5 ARM template from a prior release, see the important note at the bottom of this page.

List of F5 ARM templates for Azure deployments

The following is a list of the current supported F5 ARM templates. See the experimental directory for experimental templates. Note that many of the solutions now include Production Stack templates. This means that the templates deploy without creating or attaching any public IP addresses to the BIG-IP VEs, see the individual README files for more information.

• Deploying the BIG-IP VE in Azure - Single NIC

  • New Networking Stack

    • BYOL
      
      
    • PAYG
      
    • Using BIG-IQ for Licensing
      

  • Existing Networking Stack

    • BYOL
      
      
    • PAYG
      
    • Using BIG-IQ for Licensing
      

  • Production Networking Stack

    • BYOL
      
      
    • PAYG
      

• Deploying the BIG-IP VE in Azure - 2 NICs

  • New Networking Stack

    • BYOL
      
      
    • PAYG
      
    • Using BIG-IQ for Licensing
      

  • Existing Networking Stack

    • BYOL
      
      
    • PAYG
      
    • Using BIG-IQ for Licensing
      

  • Production Networking Stack

    • BYOL
      
      
    • PAYG
      

• Deploying the BIG-IP VE in Azure - 3 NICs

  • New Networking Stack

    • BYOL
      
      
    • PAYG
      
    • Using BIG-IQ for Licensing
      

  • Existing Networking Stack

    • BYOL
      
      
    • PAYG
      
    • Using BIG-IQ for Licensing
      

  • Production Networking Stack

    • BYOL
      
      
    • PAYG
      

• Deploying the BIG-IP VE in Azure - N NICs

  • New Networking Stack

    • BYOL
      
      
    • PAYG
      
    • Using BIG-IQ for Licensing
      

  • Existing Networking Stack

    • BYOL
      
      
    • PAYG
      
    • Using BIG-IQ for Licensing
      

  • Production Networking Stack

    • BYOL
      
      
    • PAYG
      

• Deploying the BIG-IP VE in Azure - HA Cluster: Active/Active

  • Single NIC

    • New Networking Stack

      • BYOL
        
      • PAYG
        
      • Using BIG-IQ for Licensing
        

    • Existing Networking Stack

      • BYOL
        
      • PAYG
        
      • Using BIG-IQ for Licensing
        

    • Production Networking Stack

      • BYOL
        
      • PAYG
        

  • 3 NICs

    • New Networking Stack

      • BYOL
        
      • PAYG
        
      • Using BIG-IQ for Licensing
        

    • Existing Networking Stack

      • BYOL
        
      • PAYG
        
      • Using BIG-IQ for Licensing
        

• Deploying the BIG-IP VE in Azure - HA Cluster: Active/Standby

  • New Networking Stack

    • BYOL
      
      
    • PAYG
      
    • Using BIG-IQ for Licensing
      

  • Existing Networking Stack

    • BYOL
      
      
    • PAYG
      
    • Using BIG-IQ for Licensing
      

• Deploying the BIG-IP VE in Azure - AutoScale BIG-IP LTM - VM Scale Set

  • New Networking Stack

    • PAYG
      
    • Using BIG-IQ for Licensing
      

  • Existing Networking Stack

    • PAYG
      
    • Using BIG-IQ for Licensing
      

• Deploying the BIG-IP VE in Azure - Auto Scale BIG-IP WAF (LTM + ASM) - VM Scale Set

  • New Networking Stack
    • PAYG
      
    • Using BIG-IQ for Licensing
      
  • Existing Networking Stack
    • PAYG
      
    • Using BIG-IQ for Licensing
      

---

⚠️ Important ⚠️

If you used an F5 ARM template prior to release 4.2.0.0, BIG-IP virtual servers configured with a Client SSL profile may be vulnerable to an Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack, CVE-2017-6168). For complete information on this vulnerability, see https://support.f5.com/csp/article/K21905460. F5 has released hotfixes for all vulnerable releases. All of the templates in the current release in this repository use non-vulnerable BIG-IP VE images. If you are using a BIG-IP image launched from a previous version of a template, use the following guidance: If you have an existing BIG-IP VE deployment in Azure See the Security Advisory, which contains information about upgrading your BIG-IP VE to a non-vulnerable version. For new BIG-IP VE deployments in Azure The F5 ARM templates in release 4.2.0.0 and later use non-vulnerable images. We recommending using the templates in the latest release for new deployments. For new BIG-IP VE deployments using a template in an older tagged release on GitHub If you have a specific need for using an older F5 ARM template, see Changing the BIG-IP VE image in an F5 ARM template for instructions on updating the BIG-IP images referenced in the template.

Copyright

Copyright 2014-2018 F5 Networks Inc.

License

Apache V2.0

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Contributor License Agreement

Individuals or business entities who contribute to this project must have completed and submitted the F5 Contributor License Agreement.