Administering TAS for VMs

In this section:

• Managing the runtime
  • Configuring file storage for TAS for VMs
  • Configuring load balancing for TAS for VMs
  • Configuring SSL termination for TAS for VMs on vSphere
  • Identifying the API endpoint for your TAS for VMs instance
  • Creating and modifying Quota Plans
  • Stopping and starting virtual machines
  • Scaling TAS for VMs
  • Scaling Cloud Controller
  • Cloud Controller Multi-Process Mode
  • Configuring Diego Cell disk cleanup scheduling
  • Examining GrootFS disk usage
  • Using metadata
  • Custom-branding Apps Manager
  • Planning TAS for VMs orgs and spaces
  • Orgs, spaces, roles, and permissions
  • CPU entitlement in TAS for VMs
• Enabling developers
  • Using Docker in TAS for VMs
  • Using Docker registries
  • Enabling volume services
  • Managing service brokers
  • Managing access to service plans
  • Dashboard Single Sign-on
  • Using feature flags
  • Managing custom buildpacks
  • Supporting WebSockets
• Managing internal MySQL
  • Monitoring the health of your MySQL via the MySQL Proxy
  • Scaling your internal MySQL
  • Running mysql-diag
  • Recovering from MySQL cluster downtime
• User accounts and communications
  • TAS for VMs user types
  • Creating and managing users with the cf CLI
  • Creating and managing users with the UAA CLI (UAAC)
  • Creating new TAS for VMs user accounts
  • Configuring UAA password policy
  • Adding existing SAML or LDAP users to TAS for VMs
  • Configuring app security groups for email notifications
  • Getting started with the notifications service
  • UAA
    • User Account and Authentication server
    • User Accounts and Authentication concepts
    • Identity providers in UAA
    • UAA performance metrics
  • Configuring authentication and enterprise SSO for TAS for VMs
    • Configuring authentication and enterprise SSO for TAS for VMs
    • Configuring CA as an identity provider
    • Configuring PingFederate as an identity provider
• Traffic and security
  • Front end
    • Securing incoming traffic
    • Configuring SSH access for TAS for VMs
    • App SSH components and processes
    • Configuring front end idle timeout for Gorouter and HAProxy
  • Load balancing and routing
    • Using your own lLoad balancer
    • Enabling and configuring TCP routing
    • Enabling IPv6 for hosted apps
    • Supporting HTTP/2
    • Configuring proxy settings for all apps
    • Switching app domains
    • TLS connections in TAS for VMs
    • Configuring Load balancer Health Checks for TAS for VMs Routers
    • Configuring route service lookup
  • Internal app security
    • Container security
    • Container-to-container networking
    • App security groups
    • Restricting app access to internal TAS for VMs components
  • Certificates and credentials
    • Rotating runtime CredHub encryption keys
    • Rotating the Cloud Controller database encryption key
    • Securing service instance credentials with Runtime CredHub
    • Providing a certificate for your TLS termination point
    • Trusted system certificates
    • CredHub
      • CredHub credential types
      • Backing up and restoring CredHub instances
      • Using hardware security modules with CredHub
      • Using a key management service with CredHub
      • Setting up and deploying CredHub with BOSH
      • Troubleshooting CredHub
  • Component Communications
    • BOSH DNS network communications
    • Cloud Controller network communications
    • Container-to-container network communications
    • CredHub network communications
    • Diego network communications
    • Loggregator network communications
    • MySQL network communications
    • NATS network communications
    • Routing network communications
    • UAA network communications
• Managing apps and their stacks
  • Using the Stack Auditor plug-in
  • Changing stacks
  • Restaging your apps on a Windows stack