F5 User Group

8/18/2012

Peopleclick + Authoria + Acquire = Peoplefluent• Human Resources Internet SaaS vendor• Multi-Tenant portals

• Recruitment Management– Career Portals for candidates– Applicant tracking, Interview Scheduling, Onboarding

• Vendor Management– Contingent staff placement and procurement– Hourly worker time entry and management

• Talent Management– Performance review/appraisal process– Ongoing career management

• Diversity and Affirmative Action– Compliance planning and reporting

Who is Peoplefluent?

Peoplefluent adds on Strategia and Socialtext

• Learning Management – Online, in classroom or virtual classroom– Content Management– Skills and Compliance Management– Social Learning– Reporting

• Social Collaboration– Social Dashboards– Visible Activity Streams– Content Creation/Integration

Growth via Acquisition

Diverse Client BaseHigh-Tech Energy/Utilities

High TechManufacturing

Financial Food/CPG

Healthcare/Biotech Retail Other

Peoplefluent Global Footprint: Client Locations

Indonesia

India

United Kingdom

Brazil

Finland

Netherlands

United States

Canada

Australia

South Africa

Ireland

Switzerland

Belgium

United Arab EmiratesEgypt

Germany

Austria

Algeria

Argentina

ChileUruguay

Boliva

Bermuda

Paraquay

Peru

Ecuador

ColumbiaVenezuelaPanama

Costa RicaEl Salvador

Mexico

Guatemala

China

Taiwan

South Korea

JapanItaly

Israel

Saudi Arabia

Yemen

Spain

Portugal

Sri Lanka

Sweden

Norway

New Zeland

Iceland

Moracco Tunisia

Russian Federation

RomaniaGeorgia

Nigeria Ethiopia

Thailand Vietnam

Turkey

Ukraine

DenmarkPoland

France

Jordan

BangladeshDomican Republic

Puerto Rico

SlovakiaCzech Rep

Lithuania

Hungary

Hong Kong

Kenya

Philippines

SingaporeMalaysia

Kuwait

Oman

Pakistan

Guam

Honduras

Bulgaria

Qatar

SloveniaCroatia

EstoniaLatvia

Serbia and MontenegroAzerbaijan

Lebanon Behrain

Belarus

Zambia

Senegal

MaliBurkina Faso

Cote D’Ivoire Cameroon

Lao

Luxembourg

Malta

Greece

Cyprus

Kazakhstan

Gibraltar

Trinidad and Tobago

Belize

Who uses Peoplefluent Solutions?Customer Service Customer Scope Customer Community

80% of the Fortune 100 use Peoplefluent Solutions

5,000 organizations use Peoplefluent Solutions

6 millions employees and managers in 214 countries

F5 Products used• LTM used in 5 of our ten datacenters

– Corporate HQ– Atlanta and London Datacenters– Disaster Recovery/Internal environments– Austin Datacenter replacing Netscalers

• Waltham datacenter will be converted to use LTM

• Virtual LTM being considered for lab environments

• Other datacenters will be consolidated• We use WhiteHat and looking into ASM

How we load balance• Round Robin – Stateless applications virtuals/cloned– until products have issues or need persistence

• Dynamic methods– Observered member/node– Depends on the number of pools

• Priority Group Activation– Prefer to have at least 3 servers per pool

(n+2)– 1 Cron Server, 2 web servers– Weblogic Reverse Proxy 3/6– WP1 Pools 1/1/1

Persistence• Universal– iRule, jsessionid

• Cookie– Default insert and tried passive

• SSL Persistence– when using Client and Server SSL profiles

• Source IP– Bad, but we still do it in places (easy)

iRule Lessons learned

• iRule Editor– Now has bigip.conf and bigip_base.conf– Offline iRules

• iRule naming convention, versioning– TCP Connection

• iRule HTTP Events Flowchart• TCL Errors• Scripted bigpipe iRule changes– bigpipe virtual rule diffs before/after– Version 9 vs. version 10 changes (grep rule)– Postfix to email/page upon differences

iRules used to solve problems• .NET/SQL application upgrade split

– Using classes, switch glob– Akamai challenges

• Company name change/combination– Almost 1000 lines, nested if and switch– Allows URLs to remain hosted on the same servers (3+

versions)• Maintenance Pages

– Allow class of IP addresses through for QA validation– Static/dynamic responses and redirects (client name

changes)– robots.txt, Google site verification– Graphics/icons with hex conversion

• Block/Allow– URL, IP, user-agent, HTTP verb, etc.– Faster and easier than firewall changes with our vendor

iRules used to solve problems (cont.)• Referer replace• Server Resource Cloaking

– Removing Server headers– BigIP noserver

• Apache Killer prevention (range headers)• TS-Edge JavaScript injection• Load Balance Failure• Low-cipher detection• Mobile/iPad application redirect• CAAMS pool switching• AUS Throttling users (using stats profile)• Pool Member Status

– From DevCentral (upgrading to Joel Moses’ version)

iRules and Mmmm cookies• Akamai Cookie– Prevents bypassing Akamai– Secures/restricts resources by IP– Not using Akamai’s site shield, so iRules and

Akamai configuration must be in sync• QA Test cookie• eLearning cookie– Validate users– Referring host switch directs to appropriate

resource– Allows a single VIP to host all of our

environments• Home Cookie Clean• VMS Cookie Crumb Clean

Other things we are doing with LTM• Compression• WAN/LAN optimization• Reviewing TCP and HTTP profiles for more

improvement• Fix slow connectivity with Chrome (bug)• Health Monitors

– Receive String– Session creation

What is our plan going forward?

• Gomez Real User Monitoring– Implement via iRules

• Priority for iRules• Splunk• Upgrade to version 11• iApps/iControls• Implement Partitions?• iRule to show persistence tables• Migrate from bigpipe commands to tmsh• F5 Certification

Questions?

Matthew LeggettSr. Systems Engineer – Availabilitymatthew.leggett@peoplefluent.com