Safari
Chrome
Firefox
Edge
What's new
5 Ways to Fight API Sprawl (And Why You Should Care)
By solving the challenges presented by API sprawl, you can turn multi‑architecture complexity into a competitive advantage. API Connectivity Manager helps you build a resilient API ecosystem that supports governance at scale with the speed and flexibility your developers need.
NGINX Accreditation 101
The first in a series of NGINX labs intended for educational and workshop purposes. Topics covered here include installation, load balancing, custom access logs, cache proxies, API live monitoring and dynamic configurations.
F5 Certificate Rotate with Vault and BIG-IP
Use Docker, Ansible and Terraform to create a Certificate Authority with Hashicorp Vault and F5 BIGIP. Ephemeral certificates are rotated every 2 minutes.
WAAP for Open Banking Lab
This lab demonstrates the use case for securing a Open Banking transaction initiated by a PSU (Payment Service User) by logging into the TPP (Third Party App).
What Is NGINX Open-Source Web Server Software?
NGINX is the most widely used web server software, including NGINX load balancer, HTTP cache and reverse proxy. Discover F5 NGINX software and use cases.
Secure a GraphQL Application With F5 AWAF
GraphQL is an open-source data query and manipulation language for APIs, and a runtime for fulfilling queries with existing data. It was internally developed by Facebook in 2012 and is now a part of the Linux Foundation. GraphQL is a new API technology that is gaining traction in the market and, like any other API, there are attack vectors to exploit it. Starting with Advanced WAF v16.1, F5 now natively supports security for GraphQL APIs.
Secure Your Apps Against OWASP Top 10
Protecting your applications against the OWASP Top 10 is not new; in fact, many organizations have been taking this approach for quite some time. The challenge is that most implementations that claim to "protect" against the OWASP Top 10 rely solely on signature-based protection for only a small subset of the list and provide zero insight into your compliance status.
API Security Lab Video Series
This video series demonstrates the WWT API Security Labs available on the ATC platform. We will be discussing the use case these labs addresses and also share a brief explanation on the functionality and ways to access these labs from the platform.
API Security With NGINX Using GitOps Workflow Lab Demonstration
See the API Security With NGINX Plus Using GitOps Workflow Lab in action.
Declarative AWAF Policy Lifecycle in CI/CD Pipeline Lab Demonstration
See the Declarative AWAF Policy Lifecycle in CI/CD Pipeline Lab in action.
API Security with OAuth2.0 using JWT Tokens
The purpose of this lab is to demo how NGINX Controller API Management Module and NGINX App Protect can secure the OAuth Authorization Code flow, which is core to Open Banking specifications. The NGINX App Protect will be deployed as an Ingress Controller for Kubernetes and will provide both negative and positive security by ingesting the OpenAPI declaration file. The NGINX API Gateway will be controlled by NGINX Controller, will publish the application API based on the same OpenAPI declaration file, will provide JWT authentication and authorization and enforce rate limiting. The deployment and configuration of these elements will be performed automatically through a CI/CD pipeline. ELK dashboards will be used for visualization purposes and, lastly, a DAST tool will also be run as part of the CI/CD pipeline. BIG-IP APM is deployed as both Authorization Server with OpenID Connect support and as OAuth Client, in separate instances.
VELOS: A Chassis Reimagined
F5 Networks has developed the next generation application delivery chassis system to replace VIPRION. This article discusses three key reasons why this isn't just a typical refresh.
WWT F5 EA+
This serves as a one-stop-shop for all content pertaining to the pre/post-signature offerings WWT has put into F5.
API Security: Declarative AWAF Policy Lifecycle in a CI/CD Pipeline Lab
Introducing security best practices during the early stages of software development and deployment can bring great benefits and helps improve the overall security posture of the application. Adopting agile methodologies can also improve the collaboration between teams and incorporate the DevSecOps practices within an organization, this can help an organization to achieve the GitOps principle and make their transition towards IaC. This lab focuses on the concept of declarative Adv. WAF policy lifecycle in a automated CI/CD pipeline. This pipeline uses automation tools such as Terraform and Ansible to manage the state of the devices.
Secure Modern Apps & Microservices With NGINX
NGINX accelerates content and application delivery, improves security and facilitates availability and scalability for the busiest applications on the Internet today. In this lab, we will discover the most common implementations of the NGINX software and its integration with automation platforms.
F5 Enterprise License Agreement Briefing
In this briefing, WWT will review the ways an F5 ELA (Enterprise License Agreement) can help transform and accelerate business agility and innovation. We will provide an overview of the on-demand licensing consumption model that is designed to increase flexibility of deployment when moving and securing workloads. WWT will share the details related to the EA+ program, which uses Software Advisory Services to help customers make informed decisions by creating a layout for ELA evaluation that considers business goals, strategies, current challenges, planned technology initiatives and financial implications.
Lightweight Virtual Load Balancers Briefing
In this briefing, we discuss the most common solutions and capabilities available in today's software ADC (application delivery controller) market. As companies embark on their digital transformation journey, software-based load balancers quickly become a topic of discussion to replace the dependable bare metal load balancing solutions of the past. Modernized lightweight virtual load balancers bring agility and speed to infrastructure teams, enabling them to adapt to DevOps and increasing business demands around application security. WWT will offer insight on the best use cases for each solution and can even discuss where a combination of multi-OEM solutions may be the ideal. Our goal is to have a vendor-agnostic discussion; however, we can also focus your briefing on specific products and ecosystems.
API Service Agility With NGINX
With the rise in microservices that make up an application, the need to publish services via endpoint APIs to the world has increased exponentially. NGINX provides the agility and security necessary to facilitate reliable and high-performance delivery.