Disable Advertising on Public Network

Objective

This document provides instructions on how to enable the ability to disable advertisement of services on public internet at tenant-level in F5® Distributed Cloud Services. After disabling the advertisement, you can enable advertising at individual namespace-level. For information advertisement concepts, see Advertisement Policy.

Using the instructions provided in this guide, you can raise a support request to turn on disabling of advertisement on public internet tenant-level, selectively enable advertisement at namespace-level, and turn off disabling of advertisement at tenant-level.


Prerequisites

The following prerequisites apply:

Note: If you do not have an account, see Create an Account.

  • A Load Balancer.

Note: If you do not have a load balancer, see HTTP Load Balancer.

  • API certificate or API token for API requests.

Note: If you do not have API certificate or tokens, see My Credentials.


Limitations

The following limitations apply:

  • Turning on and turning off the ability to disable advertisement on public internet at tenant-level is granted through support request only.

  • Enabling and disabling of advertising on public internet at namespace-level is supported only using APIs.

Tenant-level vs Namespace-level Control

After turning on the ability to disable advertisement at tenant-level, advertisement on public internet for all namespaces is disabled. You can disable advertisement at tenant-level using a support request and then selectively turn on the ability at namespace-level using the UpdateAllowAdvertiseOnPublic API. At namespace-level, the API has the following 3 values you can set:

  • Default

  • Enable

  • Disable

The following table presents the behavior of advertisement for various combinations of tenant-level and namespace-level settings:

Default Disable at Tenant-level Allow at Namespace-level Advertise on public
TRUE Default No
TRUE Enable Yes
TRUE Disable No
FALSE Default Yes
FALSE Enable Yes
FALSE Disable No

Disable Advertisement at Tenant-Level

Enabling the ability to disable the advertisement on public internet requires you to raise a support request.

Features can be viewed, and managed in multiple services.

This example shows Disable Advertising setup in Administration.

Step 1: Log into F5® Distributed Cloud Console, raise support request to disable advertising on internet.
  • Open F5® Distributed Cloud Console homepage, select Administration.

Note: Homepage is role based, and your homepage may look different due to your role customization. Select All Services drop-down menu to discover all options. Customize Settings: Administration > Personal Management > My Account > Edit work domain & skills button > Advanced box > check Work Domain boxes > Save changes button.

NEW HOME PAGE C
Figure: Homepage

Note: Confirm Namespace feature is in correct namespace, drop-down selector located in upper-left corner. Not available in all services.

  • Select Support in left column menu > Requests.

Note: If options are not showing available, select Show link in Advanced nav options visible in bottom left corner. If needed, select Hide to minimize options from Advanced nav options mode.

  • Select Add Requests button.

DISABLE7 2
Figure: Support Add Request

  • Select Type, select Request in drop-down menu.

  • Select Topic, select Others in drop-down menu.

  • Select Priority in drop-down menu.

  • Enter Short Subject in Please choose a subject for your issue box.

  • Enter Please explain the problem below in box.

  • Select Submit request button.

DISABLE7 4
Figure: Contact Support

Note: F5 support disables the advertisement on public networks for your tenant and confirms.

Step 2: Verify advertisement on public internet is disabled.
  • Select F5 logo to open homepage navigation.

  • Select Load Balancers box.

  • Select Virtual Hosts in left-menu > HTTP Load Balancers.

  • Select Add HTTP Load Balancer button.

  • Enter info requested.

Refer to HTTP Load Balancer guide.

  • Select Advertise on Internet in VIP Configuration section.

    • Toggle Show Advanced Fields to show more Where to Advertise the VIP options in drop-down menu:

    • Advertise on Internet: Advertise this loadbalancer on public network with default VIP.

    • Advertise on Internet(Specified VIP): Advertise this loadbalancer on public network.

      • Select Public IP option in drop-down menu.
    • Advertise Custom: Advertise this loadbalancer on specific sites.

      • Select Configure in Advertise Custom box > Toggle Show Advanced Fields > Select + Add Item button > Enter info > Select Add Item button > Select Apply button.
    • Do Not Advertise: Do not advertise this loadbalancer.

  • Select Save and Exit button.

Result: An error is returned mentioning that advertisement on public internet is not allowed.

DISABLE VIPCONFIGURATION7 6
Figure: Advertise on Internet


Enable Advertisement at Namespace-Level

Perform the following steps:

Step 1: Enable advertisement on public network at namespace-level.

Go to CLI and enter the following command:

curl -k  -X POST --cert-type P12 --cert ~/Downloads/<api-creds>.p12:<password> https://<tenant>.console.ves.volterra.io/api/web/namespaces/<namespace>/update_allow_advertise_on_public

Note: Replace <api-creds> with your API certificate file name and with the namespace name for which you want to enable advertising on public internet. Replace <password> with the password for your API certificate.

Step 2: Verify that advertisement on public internet at namespace-level is allowed.
  • Select F5 logo to open homepage navigation to open F5® Distributed Cloud Console homepage.

  • Select Load Balancers box.

  • Select Virtual Hosts in left-menu > HTTP Load Balancers.

  • Select Add HTTP Load Balancer button.

  • Perform configuration as per the instructions mentioned in the HTTP Load Balancer guide.

  • Ensure that Advertise on Internet is selected for the Where to Advertise the VIP field in VIP configuration section.

  • Select Save and Exit.

Result: The load balancer is created successfully and requests to the configured domain over internet are successful.

DISABLE VIPCONF ADVERTISE 7 8
Figure: Advertise on Internet

Concepts


API References