xc_https_waf

This repository uses HashiCorp's Terraform to deploy an application on to F5 Distributed Cloud's Regional Edges using a HTTP load balancer and optionally an App Firewall.

Requirements:

Terraform v0.12+
Volterra Provider currently v0.11.7

Creating a Distributed Cloud API Credential P12 file

Click on Administration
Click Credentials under Personal Management
Click Add Credentials
- Enter a name for your credentials
- Select API Certificate under Credential Type
- Enter a password
- Select an expiration date (maximum of 90 days)
- Click Download

Setting up Volterra provider

Create the following environment variables
- VOLT_API_P12_FILE - This provides path to the Credential P12 file you just created
- VOLT_API_URL - The URL to the Distributed Cloud API
- VES_P12_PASSWORD - The password of the P12 file

    export VOLT_API_URL='https://<your-tenant-name>.console.ves.volterra.io/api'
    export VOLT_API_P12_FILE='/home/ubuntu/myp12file.p12'
    export VES_P12_PASSWORD='password'

Run terraform.

If you have not updated the variables.tf file with your xcTenant and demoNameSpace, define those variables at the cmd line:

terraform init
terraform plan -var custName=customer -var originFQDN=www.customer.com -var xcTenant=<your-tenant-name> -var demoNameSpace=<your-namespace>
terraform apply -var custName=customer -var originFQDN=www.customer.com -var xcTenant=<your-tenant-name> -var demoNameSpace=<your-namespace>

Create and enable an Application Firewall

Set the variable disableWAF to false

terraform apply -var custName=customer -var originFQDN=www.customer.com -var xcTenant=<your-tenant-name> -var demoNameSpace=<your-namespace> -var disableWAF=false

Create and enable a Service Policy

The Service Policy defined will block sources by country Set the variable servicePolicyType to "custom"

terraform apply -var custName=customer -var originFQDN=www.customer.com -var xcTenant=<your-tenant-name> -var demoNameSpace=<your-namespace> -var disableWAF=false -var servicePolicyType=custom

ajgerace / xc_https_waf