Deploy Canary Test Policy
#########################

In this section you will simulate canary testing by associating a forwarding policy as part the previous json declaration.  This policy will route canary traffic to an alternate pool when the specified uri condition is met.

#. Create app1b.json to simulate canary testing

   - ``touch app1b.json``
   - use vscode to add the following code to **app1b.json**

   .. code:: json

      {
          "class": "AS3",
          "action": "deploy",
          "persist": true,
          "declaration": {
              "class": "ADC",
              "schemaVersion": "3.0.0",
              "id": "example-01",
              "label": "Tenant 1",
              "remark": "Simple HTTP application with round robin pool",
              "Common": {
                  "class": "Tenant",
                  "Shared": {
                      "class": "Application",
                      "template": "shared",
                      "virt_addr_10_1_20_20": {
                          "class": "Service_Address",
                          "virtualAddress": "10.1.20.20"
                      }
                  }
              },
              "tenant_01": {
                  "class": "Tenant",
                  "App_1": {
                      "class": "Application",
                      "template": "generic",
                  "app1_vs": {
                      "class": "Service_Generic",
                      "virtualAddresses": [
                          {"use": "/Common/Shared/virt_addr_10_1_20_20"}
                      ],
                      "virtualPort": 3000,
                      "pool": "web3000_pool",
                      "profileHTTP": {"use": "http"}
                      },
                      "web3000_pool": {
                          "class": "Pool",
                          "monitors": [
                              "http"
                          ],
                          "members": [
                              {
                                  "shareNodes": true,
                                  "servicePort": 3000,
                                  "serverAddresses": [
                                      "10.1.10.5",
                                      "10.1.10.10"
                                  ]
                              }
                          ]
                      }
                  },
        "App_2": {
          "class": "Application",
          "template": "http",
          "serviceMain": {
             "class": "Service_HTTP",
             "virtualAddresses": [
                    {"use": "/Common/Shared/virt_addr_10_1_20_20"}
             ],
             "virtualPort": 8080,
             "policyEndpoint": "forward_policy",
             "pool": "blue_pool",
             "persistenceMethods": []
            },
            "blue_pool": {
                "class": "Pool",
                "monitors": [
                    "http"
                ],
                "members": [{
                    "shareNodes":true,
                    "servicePort": 8080,
                    "serverAddresses": [
                        "10.1.10.5",
                        "10.1.10.10"
                    ]
                }]
            },
            "green_pool": {
            "class": "Pool",
            "monitors": [
            "http"
            ],
            "members": [{
                "shareNodes":true,
                "servicePort": 8081,
                "serverAddresses": [
                    "10.1.10.5",
                    "10.1.10.10"
                ]
            }]
        },
        "forward_policy": {
            "class": "Endpoint_Policy",
            "rules": [{
                "name": "forward_to_pool",
                "conditions": [{
                "type": "httpUri",
                "path": {
                    "operand": "contains",
                    "values": ["about"]
                }
            }],
            "actions": [{
                "type": "forward",
                "event": "request",
                "select": {
                    "pool": {
                    "use": "green_pool"
                    }
                }
            }]
        }]
      }   
    }
    }
    }
    }

#. Modify **main.tf** to use **app1b.json**

   - use vscode to replace **app1a.json** with **app1b.json**

   .. code:: json

      resource "bigip_as3"  "tenant01_app1" {
         as3_json = "${file("app1b.json")}"
      }

#. Redeploy App1 services with canary forwarding policy associated

   - ``terraform plan``
   - ``terraform apply -auto-approve``

#. Confirm BIG-IP is now configured with multiple apps

   - Explore BIG-IP GUI **Local Traffic -> Network Map** to view **app2** associated with blue and green pools

   .. image:: /_static/canary.png
       :height: 300px

   - Click on the expansion arrows next to **serviceMain** to view **pool stats** has 0 connections

   .. image:: /_static/canary0.png
       :height: 300px

   - Test connections to **serviceMain** app running the following curl commands.  Refresh browser to confirm all traffic should be served by **blue pool**

   .. code:: bash
   
      for i in {1..5} 
      do
        curl -s http://10.1.20.20:8080/this | grep -o "172.17.0.."
        curl -s http://10.1.20.20:8080/is | grep -o "172.17.0.."
        curl -s http://10.1.20.20:8080/a | grep -o "172.17.0.."
        curl -s http://10.1.20.20:8080/canary | grep -o "172.17.0.."
        curl -s http://10.1.20.20:8080/test | grep -o "172.17.0.."
      done

   .. NOTE:: 
      
      All traffic should be served by **blue pool** as the uri does not match forwarding policy **"contains" "about"**

   .. image:: /_static/canary1.png
       :height: 300px

   - Test connections to **serviceMain** app running the following curl commands.  Refresh browser to confirm all traffic should be served by **green pool**

   .. code:: bash

      for i in {1..5} 
      do
        curl -s http://10.1.20.20:8080/about | grep -o "172.17.0.."
        curl -s http://10.1.20.20:8080/about | grep -o "172.17.0.."
      done

   .. image:: /_static/canary2.png
       :height: 300px

   .. NOTE:: 
      
      The forwarding policy associated with **serviceMain** matches **/about** uri and directs to green pool.

#. Create **app1c.json** and associate **irule.tcl** to simulate blue/green deployment

   - ``touch app1c.json``
   - use vscode to add the following code to **app1c.json**

   .. code:: json

      {
          "class": "AS3",
          "action": "deploy",
          "persist": true,
          "declaration": {
              "class": "ADC",
              "schemaVersion": "3.0.0",
              "id": "example-01",
              "label": "Tenant 1",
              "remark": "Simple HTTP application with round robin pool",
              "Common": {
                  "class": "Tenant",
                  "Shared": {
                      "class": "Application",
                      "template": "shared",
                      "virt_addr_10_1_20_20": {
                          "class": "Service_Address",
                          "virtualAddress": "10.1.20.20"
                      }
                  }
              },
              "tenant_01": {
                  "class": "Tenant",
                  "App_1": {
                      "class": "Application",
                      "template": "generic",
                  "app1_vs": {
                      "class": "Service_Generic",
                      "virtualAddresses": [
                          {"use": "/Common/Shared/virt_addr_10_1_20_20"}
                      ],
                      "virtualPort": 3000,
                      "pool": "web3000_pool",
                      "profileHTTP": {"use": "http"}
                      },
                      "web3000_pool": {
                          "class": "Pool",
                          "monitors": [
                              "http"
                          ],
                          "members": [
                              {
                                  "shareNodes": true,
                                  "servicePort": 3000,
                                  "serverAddresses": [
                                      "10.1.10.5",
                                      "10.1.10.10"
                                  ]
                              }
                          ]
                      }
                  },
        "App_2": {
          "class": "Application",
          "template": "http",
          "serviceMain": {
             "class": "Service_HTTP",
             "virtualAddresses": [
                    {"use": "/Common/Shared/virt_addr_10_1_20_20"}
             ],
             "virtualPort": 8080,
             "iRules": ["go_green"],
             "policyEndpoint": "forward_policy",
             "pool": "blue_pool",
             "persistenceMethods": []
            },
            "blue_pool": {
                "class": "Pool",
                "monitors": [
                    "http"
                ],
                "members": [{
                    "shareNodes":true,
                    "servicePort": 8080,
                    "serverAddresses": [
                        "10.1.10.5",
                        "10.1.10.10"
                    ]
                }]
            },
            "green_pool": {
            "class": "Pool",
            "monitors": [
            "http"
            ],
            "members": [{
                "shareNodes":true,
                "servicePort": 8081,
                "serverAddresses": [
                    "10.1.10.5",
                    "10.1.10.10"
                ]
            }]
            },
            "go_green": {
               "class": "iRule",
              "iRule": "when CLIENT_ACCEPTED {\nif { rand() < 0.30 } {\n pool `*green_pool`\n }\n}"
        },
        "forward_policy": {
            "class": "Endpoint_Policy",
            "rules": [{
                "name": "forward_to_pool",
                "conditions": [{
                "type": "httpUri",
                "path": {
                    "operand": "contains",
                    "values": ["about"]
                }
            }],
            "actions": [{
                "type": "forward",
                "event": "request",
                "select": {
                    "pool": {
                    "use": "green_pool"
                    }
                }
            }]
        }]
      }   
    }
    }
    }
    }

#. Modify **main.tf** to use **app1c.json**

   - use vscode to replace **app1b.json** with **app1c.json**

   .. code:: json

      resource "bigip_as3"  "tenant01_app1" {
         as3_json = "${file("app1c.json")}"
      }

#. Redeploy App1 services with irule.tcl associated

   - ``terraform plan``
   - ``terraform apply -auto-approve``

#. Confirm **serviceMain** is now assigned **go_green** irule.

   - Explore BIG-IP GUI **Local Traffic -> Pools -> Statistics** to clear stats by selecting pools and clicking reset

   .. image:: /_static/poolreset.png
       :height: 300px

   - Test connections to **serviceMain** app running the following curl commands.  Approx 30% of traffic will be directed to the green pool (**172.17.0.2**).  Review pool stats to confirm.

   .. code:: json
   
      for i in {1..5} 
      do
        curl -s http://10.1.20.20:8080/this | grep -o "172.17.0.."
        curl -s http://10.1.20.20:8080/is | grep -o "172.17.0.."
        curl -s http://10.1.20.20:8080/a | grep -o "172.17.0.."
        curl -s http://10.1.20.20:8080/canary | grep -o "172.17.0.."
        curl -s http://10.1.20.20:8080/test | grep -o "172.17.0.."
      done

   .. NOTE:: 
      
      The **go_green** irule associated with **serviceMain** randomizes approximately 30% traffic to the green pool.