Manual Chapter : System Overview

Applies To:

Show Versions Show Versions

F5OS-C

  • 1.3.2, 1.3.1, 1.3.0
Manual Chapter

System Overview

Introducing the VELOS system

F5
VELOS
platforms are a modular (chassis and blade) form factor, designed to meet the needs of large enterprise networking environments that require the ability to scale and process a large volume of increasing application workloads.
VELOS systems include a platform layer known as F5OS, which is a combination of the system controllers and chassis partitions. Chassis partitions are a kind of virtual system or subset of the chassis that handles the management and separation of disjoint sets of blades within the chassis. You can divide a chassis into multiple chassis partitions, and a chassis partition can have multiple tenants. A tenant is a guest system running software (for example, a BIG-IP system).
This illustration shows a simplified VELOS deployment with a single CX410 chassis. The VELOS system shown here has been divided into four separate chassis partitions. Partition 1 has two blades, Partitions 2 and 3 each have one blade, and Partition 4 has four blades. Each blade fits into one slot and can be configured to have either two interfaces (40Gb or 100Gb), or they can be broken out into multiple (25Gb or 10Gb) interfaces. Link Aggregation provides redundancy in case network failures occur, and by spreading link aggregation groups (LAGs) across blades, you can protect against individual blade failures, assuming adequate resources are available.
Example VELOS system
You manage the chassis through two system controllers, which are deployed in a redundant configuration providing high availability and added performance. The system controllers connect to out-of-band management networks, and their management interfaces can be bonded together within a single LAG for added redundancy. Each system controller also has a dedicated console connection for direct console access.
For more information about VELOS hardware components, see
Platform Guide: VELOS CX Series
at support.f5.com.

VELOS terminology

This table lists some of the terms you will encounter when configuring the VELOS system.
Term
Definition
appliance mode
Restricts user access to root and Bash at the system controller, chassis partition, and the tenant levels. When enabled, the root user cannot log in to the system by any means, including from the serial console. Disabled by default.
blade
The primary hardware component that handles traffic management including disaggregation, packet classification, and traffic-steering for the VELOS platform. Up to eight blades can be installed into the slots on the chassis.
chassis
The main component of the unit that houses the blades, system controllers, and other components. The chassis can be divided into multiple chassis partitions.
chassis partition
A virtual system or subset of the chassis that handles the management and separation of disjoint sets of blades within the chassis. Chassis partitions form chassis level management and traffic partitions. Each chassis partition is a separate managed system, unlike the BIG-IP system’s administrative partitions within a single managed system. You can manage a chassis partition using REST APIs, the chassis partition CLI, and a webUI.
chassis terminal service
Built into the system controller software, the chassis terminal service provides a way to access the console for the system controllers and all blades.
F5OS
Operating system software for the system controllers and the chassis partitions.
LAG
Link aggregation group. A way to group interfaces on the system so they function as a single interface. The LAG (like a trunk on BIG-IP systems) distributes traffic across multiple links increasing the bandwidth by adding the bandwidth of multiple links together.
port group
A configuration object that is used to control the mode of the physical ports, whether they are bundled or unbundled, and adjust their speed.
tenant
A guest system (similar to a vCMP guest) running software within a chassis partition (for example, a BIG-IP system). Multiple tenants can be deployed in one chassis partition.
system controllers
Components of the chassis that provide a unified point for external management and connectivity to the platform and applications running in the chassis. The chassis contains a redundant pair of system controllers that provides a high bandwidth interconnect between blades and high availability. The system controllers also provide REST APIs, a system controller CLI, and a webUI.
webUI
Browser-based user interfaces for configuring the VELOS platform at the system controller (or chassis) level and at the chassis partition level.
  • System controller webUI: Used to adjust system network settings, overall system settings such as licensing, create partitions, and manage users.
  • Chassis partition webUI: Used to adjust network settings, port groups, interfaces, VLANs, deploy tenants, and manage partition users.

VELOS
system licensing overview

Before you can configure and use the
VELOS
system, you must activate a valid license. The license service coordinates the license installation on the system controllers and configures the same license on the chassis partitions and the tenants. Because the system controller license applies to the whole system, the chassis partitions and tenants all inherit licenses from the system controllers.
A base registration key, generated by
F5
, identifies a set of entitlements and is used to obtain the license for an F5 product. The base registration key with associated add-on keys are pre-installed on a new
VELOS
system. If you do not have a base registration key, contact F5 Technical Support (support.f5.com). You can obtain add-on keys to enable additional features and functionality.
For more information about licensing your
VELOS
system, see the
System licensing overview
section.

Licensing terminology

Term
Description
entitlements
Features and functionality of an
F5
product that a customer can enable by purchasing a license.
base registration key
A 27-character string that informs the license server about which
F5
products are included in the license.
add-on key
A 7-character string that enables features on a device, in addition to the entitlements associated with the device base registration key.
dossier
A digital fingerprint of an
F5
product instance. The dossier uniquely identifies the device.

VELOS system administration user/role overview

You can configure and manage the VELOS system at three different levels: the system controller or chassis level, the chassis partitions, and the individual tenants. Each has their own webUI, CLI, and REST API access.
The users at the system controller, chassis partition, and tenant levels are independent from each other, and the roles and what users can do are different depending on where the account was created. Even if one person is performing more than one role, separate accounts are needed at each level.
These roles are available on VELOS systems:
System controller administrator
Manages the whole chassis configuration with read-write access to all blades, terminal consoles, system controllers, system settings, and creates chassis partitions and users at the chassis level. Able to change the chassis root and admin passwords.
Chassis operator
Has read access to the chassis configuration and the ability to change operator password.
Chassis partition administrator
Manages the chassis partition, creates users in the chassis partition, has access to all tenant consoles in that chassis partition. Able to change the chassis partition root and admin passwords.
Chassis partition operator
Has read access to the chassis partition configuration and the ability to change operator password.
Tenant administrator
Has access to the tenant only. Performs user management on the deployed tenant(s). No management of the VELOS system.

VELOS administration tasks overview

There are many different tasks involved in administering VELOS systems. Though a configured and fully functioning system might have several different system administrators for the system controllers, chassis partitions, and tenants, it is useful to have a general idea of all of the tasks involved and the order in which you might perform them. This is generally the order in which things happen, and it is just an overview of the many tasks involved:

Before using this guide

  • Complete hardware installation. For information about the hardware, see
    Platform Guide: VELOS CX Series
    at support.f5.com.
  • Complete initial configuration. This includes configuring management IP addresses, gateway address, and creation of a chassis partition. For information about initial configuration, see
    VELOS Systems: Getting Started
    at support.f5.com/csp/knowledge-center/software/F5OS.
  • Make sure the VELOS system is made accessible. Configure network settings, DHCP, DNS, NTP. Initially, the system controller and chassis partition software will be installed. For information about software installation, see
    VELOS Systems: Software Installation and Upgrade
    at support.f5.com/csp/knowledge-center/software/F5OS.

Plan the configuration

  • Depending on the number of blades installed and your business needs, determine how many chassis partitions to create.
  • What is the network configuration at the system controller level including management interfaces?
  • What is the network configuration for the chassis partitions including port groups, interfaces, and VLANs. Will you use link aggregation or spanning tree protocol?
  • How many administrators and operators will need accounts on the system at the system controller level? On the chassis partition level?
  • How will system users be authenticated? RADIUS or LDAP?
  • Within each partition, how many tenants do you plan to deploy?
  • What will the tenants be used for? For example, which application delivery modules will you be configuring? Multiple modules?
  • The configuration can be modified later if needs change.

Configure the system from the system controller

  • Log in to the system controller.
  • License the system, if it wasn't done already. See the
    System Settings
    section.
  • Adjust network settings such as management interfaces if needed. See the
    Network Settings
    section.
  • Create chassis partitions dividing up the blades. See the
    Chassis Partitions
    section.
  • Optionally, create accounts for system controller administrators or operators. See the
    User Management
    section.

Configure the system from the chassis partitions

  • Log in to the chassis partition. See the
    Chassis Partitions
    section.
  • Configure or adjust port groups, interfaces, VLANs, and LAGs. See the
    Network Settings
    .
  • Optionally, create accounts for chassis partition administrators and operators. See the
    User Management
    section.

Deploy tenants in the chassis partitions

  • Log in to the chassis partition. See
    Chassis Partitions
    .
  • Consider tenant resources needed with regard to the different tenant images of different sizes that are available. Understand the size of the chassis partition and plan what hardware resources will be configured for this partition. See the
    Tenant Management
    section.
  • Deploy one or more tenants in the chassis partition. See the
    Tenant Management
    section.
  • Log in to each tenant and configure the system as needed. For BIG-IP tenants, see the BIG-IP system documentation at support.f5.com.