F5 Azure ARM templates
Welcome to the GitHub repository for F5's ARM templates for Azure deployments. All of the templates in this repository have been developed by F5 Networks engineers. Across all branches in this repository, there are two directories: f5_supported and experimental
The supported directory contains Azure ARM templates that have been created and fully tested by F5 Networks. These templates are fully supported by F5, meaning you can get assistance if necessary from F5 Technical Support via your typical methods.
The experimental directory also contains ARM templates that have been created by F5 Networks. However, these templates have not completed full testing and are subject to change. F5 Networks does not offer technical support for templates in the experimental directory, so use these templates with caution.
Descriptions for each template are contained at the top of each template in the Description key. For additional information, including how the templates are generated, and assistance in deploying a template, see the individual README.md file in the individual template directory.
Matrix for tagged releases
F5 has created a matrix that contains all of the tagged releases of the F5 ARM templates for Microsoft Azure and the corresponding BIG-IP versions, license types and throughputs available for a specific tagged release. See https://github.com/F5Networks/f5-azure-arm-templates/blob/v220.127.116.11/azure-bigip-version-matrix.md
If you have launched an F5 ARM template from a prior release, see the important note at the bottom of this page.
List of F5 ARM templates for Azure deployments
The following is a list of the current supported F5 ARM templates. See the experimental directory for experimental templates. Note that many of the solutions now include Production Stack templates. This means that the templates deploy without creating or attaching any public IP addresses to the BIG-IP VEs, see the individual README files for more information.
Deploying the BIG-IP VE in Azure - Single NIC
Deploying the BIG-IP VE in Azure - 2 NICs
Deploying the BIG-IP VE in Azure - 3 NICs
Deploying the BIG-IP VE in Azure - N NICs
Deploying the BIG-IP VE in Azure - HA Cluster: Active/Active
Deploying the BIG-IP VE in Azure - HA Cluster: Active/Standby
Deploying the BIG-IP VE in Azure - AutoScale BIG-IP LTM - VM Scale Set
Deploying the BIG-IP VE in Azure - Auto Scale BIG-IP WAF (LTM + ASM) - VM Scale Set
|If you used an F5 ARM template prior to release 18.104.22.168, BIG-IP virtual servers configured with a Client SSL profile may be vulnerable to an Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack, CVE-2017-6168). For complete information on this vulnerability, see https://support.f5.com/csp/article/K21905460.
F5 has released hotfixes for all vulnerable releases. All of the templates in the current release in this repository use non-vulnerable BIG-IP VE images. If you are using a BIG-IP image launched from a previous version of a template, use the following guidance:
Copyright 2014-2018 F5 Networks Inc.
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
Contributor License Agreement
Individuals or business entities who contribute to this project must have completed and submitted the F5 Contributor License Agreement.