Forum Discussion
1.Please a quick one. I want to configure BIG-IP 2000s devices in active/standby HA mode, how do I do it without making the floating IP the default g
- Apr 30, 2016
-
You can have two or more default kernel routes in each server, one per interface. For that, you will have to create a new Eth interface (or sub-interface) and create a dedicated default route for that new interface where F5 is the default gateway. All of this is easy to automate with Python Fabric, Ansible or w/e you prefer. Arguably the best solution there is for your scenario.
-
As an easier solution, you can use SNAT (automap/pool) in BigIP which applies address translation to customer source IP address. This will make sure the response packets from end-servers are routed to BigIP, not to their default gateway. Absolutely disgusting solution since you will not see who the real clients are in end-servers. You can make it a bit less disgusting with X-Forwarded-For HTTP header, but that doesn't justify taking the easy way out.
Hope this helps :)
-
-
You can have two or more default kernel routes in each server, one per interface. For that, you will have to create a new Eth interface (or sub-interface) and create a dedicated default route for that new interface where F5 is the default gateway. All of this is easy to automate with Python Fabric, Ansible or w/e you prefer. Arguably the best solution there is for your scenario.
-
As an easier solution, you can use SNAT (automap/pool) in BigIP which applies address translation to customer source IP address. This will make sure the response packets from end-servers are routed to BigIP, not to their default gateway. Absolutely disgusting solution since you will not see who the real clients are in end-servers. You can make it a bit less disgusting with X-Forwarded-For HTTP header, but that doesn't justify taking the easy way out.
Hope this helps :)
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com