F5 Distributed Cloud WAF on Regional and App Connect Deployment Mode

This deployment model offers an optimal solution for scenarios where backend applications are inaccessible from the internet, lacking a Fully Qualified Domain Name (FQDN) or Public IP.

In this case Customer Edge sites can be deployed to connect private customer sites to the Distributed Cloud Global network via IPSEC tunnels opened from Distributed Cloud Customer Edge to the closest two Regional Edges sites. 

In this lab, your focus will be to deploy an Azure VM with a Private IP and attach a Private IP as a source to the F5 HTTPS Load Balancer. The F5 HTTPS Load Balancer will reach the Azure VM using the IPSEC tunnel created through the F5 Azure VNET Site. 

All components will deploy using Terraform. F5 HTTPS Load Balancer traffic will then be forwarded across the Distributed Cloud Global Network towards an egress Regional Edge and then over an IPSEC tunnel to the Customer Edge site, where it be forwarded to the backend application as pure IP-based traffic. 

• Proficiency in deploying a multi-tier application on Azure and F5 Distributed cloud using terraform.
• Understand to Integrate F5 Distributed Cloud to securely manage traffic to and from Azure Resources.
• Learn to configure an IPSEC tunnel for private communication between Azure VMs and F5 Distributed Cloud.
• Explore capabilities of F5 Distributed Cloud, including Web application firewall (WAF), Bot Protection, API Protection and SSL Termination.
• Implement Layer 3(L3) and Layer 7(L7) DDoS protection mechanisms for enhanced security.
• Achieve a comprehensive understanding of deploying and securing applications in a hybrid cloud environment.

• Azure Account
• Azure VM
• F5 Web Application Firewall
• F5 HTTPS Load Balancer
• F5 Azure VNet Site
• F5 Cloud Credentials