2 traffic-groups, routed VIP subnet and Best Practises with Active-Active mode

Hi Zdenda,

 

it will require two traffic-groups (traffic-group-1 [default] and an additional traffic-group-2).

 

The traffic group contains all virtual adresses belonging to a service.

 

Virtual addresses include virtual IPs for virtual servers, SNAT translation addresses (created via SNAT List or SNATpool configuration objects), NAT addresses and last but not least floating self IPs.

 

Especially in case you want to use the floating self IPs for SNAT AutoMap or as next hop to provide a route in your locally attached networks they become mandatory for the traffic-group.

 

A virtual server using SNAT Automap has to have a floating self IP on the egress VLAN in it´s traffic-group.

 

So yes, multiple floating self IPs are required and you need to make sure to assign them to the different traffic-groups.

 

Routing through the BIG-IP is still an issue, as the virtual IP of 0.0.0.0/0.0.0.0 (used as wildcard network virtual "address" can be active on a single machine only.

 

That´s why you probably have to use SNAT generally for one of your traffic-groups. Otherwise you will observe asymmetric traffic. But this will break the proxy functions and is not enabled by default on your systems (look after VLAN keyed connections feature, please).

 

Thanks, Stephan