F5 Visualization and Analytics Nishant Shah Sr. Product Manager
Agenda Market Overview F5 Strategic advantage in Datacenter F5 Data richness F5 AppIQ Platform F5 AppIQ Direction Demo F5 AppIQ Vision 3
Market Overview
ustomer hallenges 5
ustomer hallenges Application Agility Operational ost Automation Self-service Application Security Visualization and analytics are essential. They are core necessities for successful application delivery. 5
Analytics Maturity urve Increasing Analytics Functionality Advanced modeling Increasing Business Value Proactive decisions ollaborative Interactive ross-functional alignment Increase visibility and adoption Ad-hoc Static report TODAY Information Insight Decision Action Self-service Reactive 6
F5 Strategic Advantage 7
F5 Strategic Advantage Full Proxy Design 7
F5 Strategic Advantage Full Proxy Design F5 Application Delivery & F5 Application Security Services 7
F5 Strategic Advantage Full Proxy Design F5 Application Delivery & F5 Application Security Services Invaluable real-time L4-L7 data 7
F5 Strategic Advantage Full Proxy Design F5 Application Delivery & F5 Application Security Services Integrated Orchestration & Management Suite Invaluable real-time L4-L7 data 7
F5 Data Richness Actionable Data 8
F5 Data Richness Actionable Data VISI BILIT 8
F5 Data Richness Actionable Data Application Definition, statistics, and events for all modules and systems VISI BILIT 8
F5 Data Richness Actionable Data Application Definition, statistics, and events for all modules and systems User Access Statistics and events at the tenant level VISI BILIT 8
F5 Data Richness Actionable Data Application Definition, statistics, and events for all modules and systems User Access Statistics and events at the tenant level VISI BILIT Device and ompute Health, statistics, and events for all BIG-IP products 8
F5 Data Richness Actionable Data Application Definition, statistics, and events for all modules and systems User Access Statistics and events at the tenant level VISI BILIT Device and ompute Health, statistics, and events for all BIG-IP products SEIM Integration Normalization of log data across modules and versions allowing for integration with other systems 8
F5 Data Richness Actionable Data Application Definition, statistics, and events for all modules and systems User Access Statistics and events at the tenant level VISI BILIT Device and ompute Health, statistics, and events for all BIG-IP products Logs forensic ritical log generation for forensics SEIM Integration Normalization of log data across modules and versions allowing for integration with other systems 8
F5 Data Richness Actionable Data Application Definition, statistics, and events for all modules and systems User Access Statistics and events at the tenant level Network Security Statistics and events at an enterprise and tenant level VISI BILIT Device and ompute Health, statistics, and events for all BIG-IP products Logs forensic ritical log generation for forensics SEIM Integration Normalization of log data across modules and versions allowing for integration with other systems 8
F5 AppIQ Platform
F5 AppIQ Platform Vision and Mission 10
F5 AppIQ Platform Vision and Mission Vision Mission Empower F5 customers with rich, contextual, and application-centric data to deliver applications in the most reliable, secure, and efficient manner. Democratize F5 data to deliver advanced AD and security cloud services, which can bring operational and business value to all F5 customers. 10
F5 AppIQ Platform Goals 11
F5 AppIQ Platform Goals Provide entralized Visibility/Analytics Transform raw data to actionable data Increase Business Value Enable Advanced AD/Security Services entralized visibility for F5 infrastructure in private, public, and hybrid environments Prevent operational cost of data collection from hundreds of BIG-IP devices Actionable data insights coupled with rich applicationcentric data Diverse predictive security or traffic analytics services via end-to-end analytics stack of F5 analytics platform entralized analytics by correlating data from various F5 modules Avoid operational complexity when converting raw data into actionable data Advanced predictive capabilities coupled with actionable feedback loop 11
F5 AppIQ Usecases Root ause Analysis Application centric Infrastructure visibility SSL Visibility Quantifying secured Application and user data End user Monitoring lient behaviors analysis Anal ytics DDoS Visibility Track key attack related KPIS Log Visibility & Forensic Optimized Log search and critical event detection Anomaly detection Detecting application performance/ security anomalies in real-time 12
F5 AppIQ Platform F5 Visualization/Analytics Third-Party Partners F5 AppIQ Data collection, normalization, and cleaning across BIG-IP versions and modules Analytics engine to provide machine learning-enabled behavior and predictive analytics Distributed storage layer to store historical data with high granularity REST API access for integration with orchestration and third-party solutions Insights Orchestration Engine/Tool (Policy store) EM (ELASTI OMPUTE MANAGEMENT) VM/BARE METAL/ONTAINER Rich F5 Data Sources Tmstats, TMSH stats, syslog, log, events, AVR stats, VM stats Actions Private loud/public loud/o-location sites/hybrid cloud 13
F5 AppIQ Microservices-Based Architecture Microservice container Auto-scale 14
F5 AppIQ Microservices-Based Architecture Microservice container Auto-scale Source atalog Data Refinement Agent ontroller Data Refinement and Data Discovery Data discovery from BIG-IP Data cleaning Data normalization Data validation Data transformation and enrichment Data filtering Data publishing 14
F5 AppIQ Microservices-Based Architecture Microservice container Auto-scale Apache Kafka Apache Spark Data Analytics ustomized data streams for further analysis ustomized algorithms for pattern recognitions omplex correlations Source atalog Data Refinement Agent ontroller Data Refinement and Data Discovery Data discovery from BIG-IP Data cleaning Data normalization Data validation Data transformation and enrichment Data filtering Data publishing 14
F5 AppIQ Microservices-Based Architecture Microservice container Auto-scale Elastic Search Data Storage Distributed storage for historical data Aggregation of data Optimized search over huge data set Optimized data storage using compression techniques Apache Kafka Apache Spark Data Analytics ustomized data streams for further analysis ustomized algorithms for pattern recognitions omplex correlations Source atalog Data Refinement Agent ontroller Data Refinement and Data Discovery Data discovery from BIG-IP Data cleaning Data normalization Data validation Data transformation and enrichment Data filtering Data publishing 14
F5 AppIQ Microservices-Based Architecture Microservice container Auto-scale Elastic Search Data Storage Distributed storage for historical data Aggregation of data Optimized search over huge data set Optimized data storage using compression techniques Apache Kafka Apache Spark Data Analytics ustomized data streams for further analysis ustomized algorithms for pattern recognitions omplex correlations Source atalog Data Refinement Agent ontroller Data Refinement and Data Discovery Data discovery from BIG-IP Data cleaning Data normalization Data validation Data transformation and enrichment Data filtering Data publishing 14
F5 AppIQ Microservices-Based Architecture Microservice container Auto-scale Query Service API Data Access Restful access to real-time and stored data Restful access for visualization Restful access for intelligent orchestration by consuming realtime insights Restful access to advanced forensic tools like Splunk Elastic Search Data Storage Distributed storage for historical data Aggregation of data Optimized search over huge data set Optimized data storage using compression techniques Apache Kafka Apache Spark Data Analytics ustomized data streams for further analysis ustomized algorithms for pattern recognitions omplex correlations Source atalog Data Refinement Agent ontroller Data Refinement and Data Discovery Data discovery from BIG-IP Data cleaning Data normalization Data validation Data transformation and enrichment Data filtering Data publishing 14
F5 AppIQ Microservices-Based Architecture Microservice container Auto-scale Query Service API Data Access Restful access to real-time and stored data Restful access for visualization Restful access for intelligent orchestration by consuming realtime insights Restful access to advanced forensic tools like Splunk Elastic Search Data Storage Distributed storage for historical data Aggregation of data Optimized search over huge data set Optimized data storage using compression techniques Apache Kafka Apache Spark Data Analytics ustomized data streams for further analysis ustomized algorithms for pattern recognitions omplex correlations Source atalog Data Refinement Agent ontroller Data Refinement and Data Discovery Data discovery from BIG-IP Data cleaning Data normalization Data validation Data transformation and enrichment Data filtering Data publishing EM (Elastic ompute Management) (Google Kubernetes-Based) ontainer Lifecycle Management Deploying Upgrading Monitoring Resource scheduling Auto scaling 14
F5 AppIQ Microservices-Based Architecture Microservice container Auto-scale Query Service API Data Access Restful access to real-time and stored data Restful access for visualization Restful access for intelligent orchestration by consuming realtime insights Restful access to advanced forensic tools like Splunk Elastic Search Data Storage Distributed storage for historical data Aggregation of data Optimized search over huge data set Optimized data storage using compression techniques Apache Kafka Apache Spark Data Analytics ustomized data streams for further analysis ustomized algorithms for pattern recognitions omplex correlations Source atalog Data Refinement Agent ontroller Data Refinement and Data Discovery Data discovery from BIG-IP Data cleaning Data normalization Data validation Data transformation and enrichment Data filtering Data publishing EM (Elastic ompute Management) (Google Kubernetes-Based) ontainer Lifecycle Management Deploying Upgrading Monitoring Resource scheduling Auto scaling 14
F5 AppIQ Vision F5 AppIQ Appstore F5 AppIQ Apps Risk-IQ Traffic-IQ Threat Intelligence SP Analytics F5 AppIQ Platform F5 AppIQ (ollect, Stream, Analyze, Index, Store, Access) Data source Tmstats, TMSH stats, syslog, log, events, AVR stats, VM infra stats, Amazon infra stats F5 AppIQ Platform Private cloud Hybrid cloud Public cloud Note AppIQ apps shows here are just an example and not committed application. 15
F5 AppIQ Roadmap
AppIQ Direction August 2016 Americas Agility October 2016 Beta 1H-2017 FS 2H-2017 2 nd Release AppIQ Overview & Demo AppIQ Beta/ Early access AppIQ FS AppIQ 2 nd Release Scalable BigData platform. entralized Application inventory with key performance KPI. Traffic Visibility & Drilldowns. BIG-IP device visibility. Threshold based alerts. entralized event visibility. DDoS visibility. SSL visibility. End user Visibility. Anomaly detection. Multi-Datacenter deployments Role based access control. Integrate with VMware. Note Information provided on this slide gives an overview of overall direction and nothing is committed.. 17
F5 AppIQ Demo
F5 AppIQ Demo 19
F5 AppIQ Demo 19
F5 AppIQ Demo 19
F5 AppIQ + Splunk Integration Demo 20
F5 AppIQ Strategy
F5 AppIQ Strategy 22
F5 AppIQ Strategy On-Premise/Private loud Goal Provide centralized, near real-time, application centric visibility into application infrastructure and security for all F5 customers. Usecase Application Traffic Visibility Log Visibility End User Monitoring Security Visibility SSL Visibility L4/L7 DDoS attack Visibility Server Infrastructure Visibility Integrate with 3 rd party Vendor Splunk, VMware, Graphite, HP archsight. AppIQ Analytics Apps 22
F5 AppIQ Strategy On-Premise/Private loud Goal Provide centralized, near real-time, application centric visibility into application infrastructure and security for all F5 customers. Usecase Application Traffic Visibility Log Visibility End User Monitoring Security Visibility SSL Visibility L4/L7 DDoS attack Visibility Server Infrastructure Visibility Integrate with 3 rd party Vendor Splunk, VMware, Graphite, HP archsight. AppIQ Analytics Apps Public loud Goal Extend F5 AppIQ capabilities in to public cloud to enable seamless application monitoring for F5 customers. Usecase Application traffic visibility for Hybrid application infrastructure. Integrate with loud orchestration & management platforms. Integrate with cloud data sources. Extend Analytics Apps as a service. Trend analysis & predicative analytics Automated actions based on insights 22
F5 AppIQ Strategy On-Premise/Private loud Goal Provide centralized, near real-time, application centric visibility into application infrastructure and security for all F5 customers. Usecase Application Traffic Visibility Log Visibility End User Monitoring Security Visibility SSL Visibility L4/L7 DDoS attack Visibility Server Infrastructure Visibility Integrate with 3 rd party Vendor Splunk, VMware, Graphite, HP archsight. AppIQ Analytics Apps Public loud Goal Extend F5 AppIQ capabilities in to public cloud to enable seamless application monitoring for F5 customers. Usecase Application traffic visibility for Hybrid application infrastructure. Integrate with loud orchestration & management platforms. Integrate with cloud data sources. Extend Analytics Apps as a service. Trend analysis & predicative analytics Automated actions based on insights F5 Analytics-as-a-Service Goal Offer Advanced analytics capabilities within F5 AppIQ as a service with Silverline. Usecase Extensive advanced security analytics to keep application secured. Automated actions based on predictive insights 22
F5 AppIQ Strategy On-Premise/Private loud Goal Provide centralized, near real-time, application centric visibility into application infrastructure and security for all F5 customers. Usecase Application Traffic Visibility Log Visibility End User Monitoring Security Visibility SSL Visibility L4/L7 DDoS attack Visibility Server Infrastructure Visibility Integrate with 3 rd party Vendor Splunk, VMware, Graphite, HP archsight. AppIQ Analytics Apps Public loud Goal Extend F5 AppIQ capabilities in to public cloud to enable seamless application monitoring for F5 customers. Usecase Application traffic visibility for Hybrid application infrastructure. Integrate with loud orchestration & management platforms. Integrate with cloud data sources. Extend Analytics Apps as a service. Trend analysis & predicative analytics Automated actions based on insights F5 Analytics-as-a-Service Goal Offer Advanced analytics capabilities within F5 AppIQ as a service with Silverline. Usecase Extensive advanced security analytics to keep application secured. Automated actions based on predictive insights Information Insights Decision Action 22
Give Feedback Get Points! Add class to your personal schedule. Survey will pop up in Mobile App. Answer the multiple choice. Submit your question to complete. Receive 5 points!