Merge pull request #203 from stockerts/dev

Stock fork to Source
f5devcentral · Apr 25, 2024 · f6b8ea1 · f6b8ea1
2 parents 0dd8eb9 + f347d3a
commit f6b8ea1
Show file tree

Hide file tree

Showing 43 changed files with 173 additions and 300 deletions.
diff --git a/docs/class4/_static/intro-002.png b/docs/class4/_static/intro-002.png
diff --git a/docs/class4/_static/intro-003.png b/docs/class4/_static/intro-003.png
diff --git a/docs/class4/_static/intro-004.png b/docs/class4/_static/intro-004.png
diff --git a/docs/class4/_static/intro-006.png b/docs/class4/_static/intro-006.png
diff --git a/docs/class4/_static/intro-008.png b/docs/class4/_static/intro-008.png
diff --git a/docs/class4/_static/intro-009.png b/docs/class4/_static/intro-009.png
diff --git a/docs/class4/_static/lab1-task1-007.png b/docs/class4/_static/lab1-task1-007.png
diff --git a/docs/class4/_static/lab1-task2-002.png b/docs/class4/_static/lab1-task2-002.png
diff --git a/docs/class4/_static/lab1-task2-003.png b/docs/class4/_static/lab1-task2-003.png
diff --git a/docs/class4/_static/lab1-task2-004.png b/docs/class4/_static/lab1-task2-004.png
diff --git a/docs/class4/_static/lab1-task2-005.png b/docs/class4/_static/lab1-task2-005.png
diff --git a/docs/class4/_static/lab1-task3-001.png b/docs/class4/_static/lab1-task3-001.png
diff --git a/docs/class4/_static/lab1-task3-002.png b/docs/class4/_static/lab1-task3-002.png
diff --git a/docs/class4/_static/lab1-task4-001.png b/docs/class4/_static/lab1-task4-001.png
diff --git a/docs/class4/_static/lab1-task4-005.png b/docs/class4/_static/lab1-task4-005.png
diff --git a/docs/class4/_static/lab1-task4-006.png b/docs/class4/_static/lab1-task4-006.png
diff --git a/docs/class4/_static/lab1-task4-006a.png b/docs/class4/_static/lab1-task4-006a.png
diff --git a/docs/class4/_static/lab2-task1-002.png b/docs/class4/_static/lab2-task1-002.png
diff --git a/docs/class4/_static/lab2-task1-003.png b/docs/class4/_static/lab2-task1-003.png
diff --git a/docs/class4/_static/lab2-task1-004.png b/docs/class4/_static/lab2-task1-004.png
diff --git a/docs/class4/_static/lab2-task1-005.png b/docs/class4/_static/lab2-task1-005.png
diff --git a/docs/class4/_static/lab2-task1-006.png b/docs/class4/_static/lab2-task1-006.png
diff --git a/docs/class4/_static/lab2-task1-007.png b/docs/class4/_static/lab2-task1-007.png
diff --git a/docs/class4/_static/lab2-task1-008.png b/docs/class4/_static/lab2-task1-008.png
diff --git a/docs/class4/_static/lab2-task1-009.png b/docs/class4/_static/lab2-task1-009.png
diff --git a/docs/class4/_static/lab2-task1-010.png b/docs/class4/_static/lab2-task1-010.png
diff --git a/docs/class4/_static/lab2-task1-011.png b/docs/class4/_static/lab2-task1-011.png
diff --git a/docs/class4/_static/lab2-task1-012.png b/docs/class4/_static/lab2-task1-012.png
diff --git a/docs/class4/_static/lab2-task1-013.png b/docs/class4/_static/lab2-task1-013.png
diff --git a/docs/class4/_static/lab2-task2-001.png b/docs/class4/_static/lab2-task2-001.png
diff --git a/docs/class4/_static/lab2-task2-005.png b/docs/class4/_static/lab2-task2-005.png
diff --git a/docs/class4/_static/lab2-task2-006.png b/docs/class4/_static/lab2-task2-006.png
diff --git a/docs/class4/_static/lab2-task2-007.png b/docs/class4/_static/lab2-task2-007.png
diff --git a/docs/class4/_static/lab2-task2-009.png b/docs/class4/_static/lab2-task2-009.png
diff --git a/docs/class4/_static/shared-001.png b/docs/class4/_static/shared-001.png
diff --git a/docs/class4/_static/shared-002.png b/docs/class4/_static/shared-002.png
diff --git a/docs/class4/_static/shared-003.png b/docs/class4/_static/shared-003.png
diff --git a/docs/class4/_static/shared-004.png b/docs/class4/_static/shared-004.png
diff --git a/docs/class4/_static/shared-005.png b/docs/class4/_static/shared-005.png
diff --git a/docs/class4/_static/shared-006.png b/docs/class4/_static/shared-006.png
diff --git a/docs/class4/_static/shared-007.png b/docs/class4/_static/shared-007.png
diff --git a/docs/class4/lab1.rst b/docs/class4/lab1.rst
diff --git a/docs/class4/lab2.rst b/docs/class4/lab2.rst
@@ -1,55 +1,65 @@
 Lab 2: API Protection & Rate Limiting
 =====================================
 
-F5® Distributed Cloud API Protection provides key security functionality to secure APIs.
+Lab 2 you will enable API Protection and Rate Limiting on select Endpoint.
 
 This lab's tasks will walk through the configuration steps and note additional configurations available.
 
+**Expected Lab Time: 25 minutes**
+
 Task 1: Attaching API Protection to Load Balancer Object
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-In this task's series of steps you will enable the API Discovery & Protection feature on the
-previously built Load Balancer object delivering the targeted application/API.
+In this task's series of steps you will enable the API Protection feature on the
+previously built Load Balancer object delivering the targeted API.
 
 #. In the left-hand navigation of the **Web App & API Protection** service, click on **Load Balancers > HTTP Load**
    **Balancers** under the **Manage** section.
 
-   |class4-shared-002|
+   .. image:: _static/shared-002.png
+      :width: 800px
 
 #. In the resulting **Load Balancers** window, click on the three dots **...** in the
    **Action** column, and the select **Manage Configuration**.
 
-   |class4-shared-003|
+   .. image:: _static/shared-003.png
+      :width: 800px
 
 #. Click **Edit Configuration** in the top-right corner.
 
-   |class4-shared-004|
+   .. image:: _static/shared-004.png
+      :width: 800px
 
 #. In the **API Protection > API Protection Rules** section, click the **Configure** link.
 
-   |lab2-task1-004|
+   .. image:: _static/lab2-task1-004.png
+      :width: 800px
 
 #. In the resulting **API Protection Rules** window, click **Configure** in the
    **API Endpoints** section.
 
-   |lab2-task1-005|
+   .. image:: _static/lab2-task1-005.png
+      :width: 800px
 
 #. Click **Add Item** in the **API Endpoints** window.
 
-   |lab2-task1-006|
+   .. image:: _static/lab2-task1-006.png
+      :width: 800px
 
 #. In the resulting window, input **block-endpoint** in the **Name** field of the
    **Metadata** section.
 
 #. In the **Action** area, click the drop-down arrow indicated and select **Deny**.
 
-   |lab2-task1-007|
+   .. image:: _static/lab2-task1-007.png
+      :width: 800px
 
 #. In the **API Endpoint** section, click on the **API Endpoint** input field as indicated.
 
 #. Select the **See Suggestions** link.
 
-   |lab2-task1-008|
+   .. image:: _static/lab2-task1-008.png
+      :width: 800px
 
 #. Select **/api/CatLookup/GetAllCats** from the available options provided.
 
@@ -59,57 +69,68 @@ previously built Load Balancer object delivering the targeted application/API.
 
 #. In the **HTTP Methods** area, click in the **Method List** input field.
 
-   |lab2-task1-009|
+   .. image:: _static/lab2-task1-009.png
+      :width: 800px
 
 #. Select **Any** from the available methods provided.
 
    .. note::
       *Multiple methods can be selected if needed*
 
-   |lab2-task1-010|
+   .. image:: _static/lab2-task1-010.png
+      :width: 800px
 
 #. Review the configuration and click, the **Apply** button.
 
-   |lab2-task1-011|
+   .. image:: _static/lab2-task1-011.png
+      :width: 800px
 
 #. Review the API Endpoint deny rule and click, the **Apply** button.
 
-   |lab2-task1-012|
+   .. image:: _static/lab2-task1-012.png
+      :width: 800px
 
 #. Note that API Protection Rules are configure for the API Endpoints and click, the
    **Apply** button.
 
-   |lab2-task1-013|
+   .. image:: _static/lab2-task1-013.png
+      :width: 800px
 
 #. Select **Other Settings** on the left then click on **Save and Exit**
    at the bottom right of window.
 
-   |lab2-task2-009|
+   .. image:: _static/lab2-task2-009.png
+      :width: 800px
 
 #. Using another browser tab, navigate to the the following URL to confirm
    access is denied.
 
    .. note::
-      *URI Path matching is case-sensitive. Make sure the exact case format is used as listed.*
+      *Path/URI matching is case-sensitive. Make sure the exact case format is used as listed.
+      Copy and paste the following Path/URI to ensure matching.*
 
-   **http://<namespace>.lab-sec.f5demos.com/api/CatLookup/GetAllCats**
+   ``http://<namespace>.lab-sec.f5demos.com/api/CatLookup/GetAllCats``
 
-   |lab2-task1-014|
+   .. image:: _static/lab2-task1-014.png
+      :width: 500px
 
 #. Select **Security Dashboard** within the XC tab, scroll down and click on the
    **<namespace>-lb** load balancer name.
 
-   |class4-shared-005|
+   .. image:: _static/shared-005.png
+      :width: 800px
 
-   |class4-shared-006|
+   .. image:: _static/shared-006.png
+      :width: 800px
 
 #. Click on **Security Analytics**, observe the event. Expand event details by clicking on the **right arrow**.
    Events with the response code of **403** will be present.
 
    .. note::
       *Change time to 1 hour, and make sure the page has been refreshed*
 
-   |lab2-task1-015|
+   .. image:: _static/lab2-task1-015.png
+      :width: 800px
 
    .. note::
       *Detection information will be near the bottom of the event detail.
@@ -119,82 +140,95 @@ Task 2: Attach API Rate Limiting to Load Balancer Object
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 In this task's series of steps you will enable the API Rate Limiting feature on the
-previously built Load Balancer object delivering the targeted application/API.
+previously built Load Balancer object delivering the targeted API.
 
 #. In the left-hand navigation of the **Web App & API Protection** service, click on **Load Balancers > HTTP Load**
    **Balancers** under the **Manage** section.
 
-   |class4-shared-002|
+   .. image:: _static/shared-002.png
+      :width: 800px
 
 #. In the resulting **Load Balancers** window, click on the three dots **...** in the
    **Action** column, and the select **Manage Configuration**.
 
-   |class4-shared-003|
+   .. image:: _static/shared-003.png
+      :width: 800px
 
 #. Click **Edit Configuration** in the top-right corner.
 
-   |class4-shared-004|
+   .. image:: _static/shared-004.png
+      :width: 800px
 
 #. Using the left-hand navigation, click the **Common Security Controls** link.
 
-   |lab2-task2-001|
+   .. image:: _static/lab2-task2-001.png
+      :width: 800px
 
 #. Locate the **Rate Limiting** area of the **Common Security Controls** and use the
    drop-down to select **API Rate Limit**.
 
-   |lab2-task2-003|
+   .. image:: _static/lab2-task2-003.png
+      :width: 800px
 
 #. In the expanded menu under **Rate Limiting**, click **Configure** in the **API
    Endpoints** area.
 
-   |lab2-task2-004|
-
 #. In the resulting window **API Endpoints** window, click **Add Item**.
 
-   |lab2-task2-005|
+   .. image:: _static/lab2-task2-005.png
+      :width: 800px
 
 #. In the resulting configuration window, select **/api/DogLookup/GetAllDogs** for **API
    Endpoint** input.
 
 #. Select **ANY** for **Method** input and then click the **Apply** button.
 
-   |lab2-task2-006|
+   .. image:: _static/lab2-task2-006.png
+      :width: 800px
 
 #. Review the API Endpoint rate limiting rule and click, the **Apply** button.
 
-   |lab2-task2-007|
+   .. image:: _static/lab2-task2-007.png
+      :width: 800px
 
 #. Note the updated configuration for API Rate limiting, Click **Other Settings** on the
    the left, navigation on the bottom right then click on **Save and Exit**
 
-   |lab2-task2-008|
+   .. image:: _static/lab2-task2-008.png
+      :width: 800px
 
-   |lab2-task2-009|
+   .. image:: _static/lab2-task2-009.png
+      :width: 800px
 
 #. Using another browser tab, navigate to the the following URL to confirm
    rate limiting, by freshing your tab several times.
 
    .. note::
-      *URI Path matching is case-sensitive. Make sure the exact case format is used as listed.*
+      *Path/URI matching is case-sensitive. Make sure the exact case format is used as listed.
+      Copy and paste the following Path/URI to ensure matching.*
 
-   **http://<namespace>.lab-sec.f5demos.com/api/DogLookup/GetAllDogs**
+   ``http://<namespace>.lab-sec.f5demos.com/api/DogLookup/GetAllDogs``
 
-   |lab2-task2-010|
+   .. image:: _static/lab2-task2-010.png
+      :width: 500px
 
 #. Select **Security Dashboard** within the XC tab, scroll down and click on the
    **<namespace>.lab-sec.f5demos.com** load balancer name.
 
-   |class4-shared-005|
+   .. image:: _static/shared-005.png
+      :width: 800px
 
-   |class4-shared-006|
+   .. image:: _static/shared-006.png
+      :width: 800px
 
 #. Click on **Security Analytics**, observe the event. Expand event details by clicking on the **right arrow**.
    Events with the response code of **429** will be present.
 
    .. note::
       *Change time to 1 hour, and make sure the page has been refreshed*
 
-   |lab2-task2-011|
+   .. image:: _static/lab2-task2-011.png
+      :width: 800px
 
    .. note::
       *Detection information will be near the bottom of the event detail.
@@ -205,73 +239,5 @@ configuration can also be fully deployed and managed via the F5 Distributed Clou
 
 **End of Lab 2:**  This concludes Lab 2. A Q&A session will begin shortly after conclusion of the overall lab.
 
-|labend|
-
-.. |class4-shared-001| image:: _static/class4-shared-001.png
-   :width: 800px
-.. |class4-shared-002| image:: _static/class4-shared-002.png
-   :width: 800px
-.. |class4-shared-003| image:: _static/class4-shared-003.png
-   :width: 800px
-.. |class4-shared-004| image:: _static/class4-shared-004.png
-   :width: 800px
-.. |class4-shared-005| image:: _static/class4-shared-005.png
-   :width: 800px
-.. |class4-shared-006| image:: _static/class4-shared-006.png
-   :width: 800px
-.. |class4-shared-007| image:: _static/class4-shared-007.png
-   :width: 800px
-.. |lab2-task1-001| image:: _static/lab2-task1-001.png
-   :width: 800px
-.. |lab2-task1-002| image:: _static/lab2-task1-002.png
-   :width: 800px
-.. |lab2-task1-003| image:: _static/lab2-task1-003.png
-   :width: 800px
-.. |lab2-task1-004| image:: _static/lab2-task1-004.png
-   :width: 800px
-.. |lab2-task1-005| image:: _static/lab2-task1-005.png
-   :width: 800px
-.. |lab2-task1-006| image:: _static/lab2-task1-006.png
-   :width: 800px
-.. |lab2-task1-007| image:: _static/lab2-task1-007.png
-   :width: 800px
-.. |lab2-task1-008| image:: _static/lab2-task1-008.png
-   :width: 800px
-.. |lab2-task1-009| image:: _static/lab2-task1-009.png
-   :width: 800px
-.. |lab2-task1-010| image:: _static/lab2-task1-010.png
-   :width: 800px
-.. |lab2-task1-011| image:: _static/lab2-task1-011.png
-   :width: 800px
-.. |lab2-task1-012| image:: _static/lab2-task1-012.png
-   :width: 800px
-.. |lab2-task1-013| image:: _static/lab2-task1-013.png
-   :width: 800px
-.. |lab2-task1-014| image:: _static/lab2-task1-014.png
-   :width: 500px
-.. |lab2-task1-015| image:: _static/lab2-task1-015.png
-   :width: 800px
-.. |lab2-task2-001| image:: _static/lab2-task2-001.png
-   :width: 800px
-.. |lab2-task2-002| image:: _static/lab2-task2-002.png
-   :width: 800px
-.. |lab2-task2-003| image:: _static/lab2-task2-003.png
-   :width: 800px
-.. |lab2-task2-004| image:: _static/lab2-task2-004.png
-   :width: 800px
-.. |lab2-task2-005| image:: _static/lab2-task2-005.png
-   :width: 800px
-.. |lab2-task2-006| image:: _static/lab2-task2-006.png
-   :width: 800px
-.. |lab2-task2-007| image:: _static/lab2-task2-007.png
-   :width: 800px
-.. |lab2-task2-008| image:: _static/lab2-task2-008.png
-   :width: 800px
-.. |lab2-task2-009| image:: _static/lab2-task2-009.png
-   :width: 800px
-.. |lab2-task2-010| image:: _static/lab2-task2-010.png
-   :width: 500px
-.. |lab2-task2-011| image:: _static/lab2-task2-011.png
-   :width: 800px
-.. |labend| image:: _static/labend.png
+.. image:: _static/labend.png
    :width: 800px