Downloaded 18 times
Uploaded byAkamai Developers & Admins
Secure DevOps Workflow at Dell with Enterprise Application Access (EAA)
Dell uses Akamai's Enterprise Application Access (EAA) to securely test changes to Dell.com redirects and caching rules. EAA allows Dell developers and testers to access non-production environments from various devices internally and externally without a VPN. This helps Dell validate complex configurations before deploying updates to production and identify issues by seeing which redirect rule was triggered. Dell installed EAA appliances in their environment which use reverse proxies and Active Directory integration to securely grant internal users access for automated testing of Akamai rules.
More Related Content
Similar to Secure DevOps Workflow at Dell with Enterprise Application Access (EAA)
![Support, Monitoring, Continuous Improvement & Scaling Agentic Automation [3/3]](https://cdn.slidesharecdn.com/ss_thumbnails/agenticcommunityseries-day3-cfd-251120170304-ddef8112-thumbnail.jpg?width=640&height=640&fit=bounds)
Secure DevOps Workflow at Dell with Enterprise Application Access (EAA)
- 1. © AKAMAI -EDGE 2017 Secure DevOps Workflow at Dell with Enterprise Application Access (EAA)
- 2. © AKAMAI -EDGE 2017 How does Dell use Akamai EAA? SPOILER ALERT: to make testing Dell.com easier
- 3. © AKAMAI -EDGE 2017 Motivation • Securely expose private builds and assets of dell.com to internal users as part of the DevOps process • Validate complex delivery configs on properties (ex: Caching, FEO etc) • Enable multi-Device global testing using the non-prod environment • Utilize Edge Redirector cloudlet to enhance URL rewrites (this one’s big for us!)
- 4. © AKAMAI -EDGE 2017 Situation: Thousands of redirect rules Complication: Pain for IT • Hard to maintain • Hard to test all the (thousands of rules) • Causing outages
- 5. © AKAMAI -EDGE 2017 Migrate from Origin Reverse Proxy to Akamai ● Offload URL redirects to the Edge ● Reduce page load times for users globally ● Increase site uptime ● Optimize redirect rule management
- 6. © AKAMAI -EDGE 2017 But how do we test our migration as we’re doing it? • We need to be able to: • Validate redirect rules in a test environment before they are deployed to production •Test all the rules, not just the new one •Identify what rule was triggered to cause destination url • Access test environment with Akamai redirect rules •from mobile and desktop devices •from both inside and outside Dell intranet • Test without a VPN
- 7. © AKAMAI -EDGE 2017 Approaches Explored Jump in, think outside the box
- 8. © AKAMAI -EDGE 2017 Approaches Explored (continued) • Device testing solutions • Don't allow testing property manager policies • Only partially solves the problem • Doesn’t allow LDAP authentication • Write our own redirect manager? • Takes too long • Doesn’t solve all problems • What about a DMZ? • Can reach Akamai • Can test any device both inside and outside the network
- 9. © AKAMAI -EDGE 2017 Network guys frowned on that ● Pain to set up, maintain ● Security issues, authentication ● Bureaucracy, dependencies
- 10. © AKAMAI -EDGE 2017 Akamai Enterprise Application Access (EAA) • DMZ-as-a-Service • Doesn’t require a VPN • Operates over standard ports (443,80) which are not blocked • Drop-in VM network appliance
- 11. © AKAMAI -EDGE 2017
- 12. © AKAMAI -EDGE 2017 Simpler Way to Connect Test Environments to Akamai QA Env Dell Firewall Developer or tester Dev Env Enterprise Connector Staging > No hole in the firewall > No complex configuration > No client software > No lateral movement Access Point Developer or tester Akamai Platform
- 13. © AKAMAI -EDGE 2017 EAA Appliance Setup ● Akamai sent us the Hyper-V connector images we installed in our environment ● Used the Akamai portal for configuration ● Reverse proxy (ARR) to point to the test environs ● Added authorized users/groups using AD connector • Users can login using their network username/password
- 14. © AKAMAI -EDGE 2017 Automated testing
- 15. © AKAMAI -EDGE 2017 Questions?
- 16. © AKAMAI -EDGE 2017 Benefits • Access test environment from mobile and desktop, from both inside and outside Dell intranet. • Real devices • Securely • Easily (network creds) • Test Akamai redirect and caching rules in our testing environment before they are deployed to production • See the redirect rule key in response header after redirect so we can see what rule was invoked • Helps a lot with troubleshooting and testing • Automated deployments between environments using the Akamai Cloudlet API
- 17. © AKAMAI -EDGE 2017 Future • Complete the migration of rewrite rules from ARR to Akamai • Automated testing of caching rules • Train the business operations team with utilizing and testing SEO redirect rules • Usability and A/B testing
- 18. © AKAMAI -EDGE 2017 Current Model
- 19. © AKAMAI -EDGE 2017 Future Model
- 20. © AKAMAI -EDGE 2017 LDAP Configuration
- 21. © AKAMAI -EDGE 2017 DNS setup (external)
- 22. © AKAMAI -EDGE 2017 Proxy Configuration
- 23. © AKAMAI -EDGE 2017 Software Architect, Dell.com Prashanth Srinivasan Sr. Principal Software Engineer, Dell.com Robert Corvus Director of Engineering, Dell.com Chris Pippen Enterprise Specialist former SQA Architect Ken Eaton Sr. Engagement Manager, Akamai Speakers Bhushan Rajadhyax
- 24. © AKAMAI -EDGE 2017
- 25. © AKAMAI -EDGE 2017