For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

RocFive_147660's avatar
RocFive_147660
Icon for Nimbostratus rankNimbostratus
Mar 19, 2014

about the HA feature of two F5 BIG-IP 1600 LTM load balancers

Dear all F5 experts,

 

I have two F5 BIG-IP 1600 LTM load balancers. One F5 BIG-IP 1600 is active status & another F5 BIG-IP 1600 is standby status.

 

Thus, I think all the network traffic to the virtual IP must pass through the active F5 BIG-IP 1600.

 

I guess the standby F5 BIG-IP 1600 just keep at standby mode and no network traffic pass through it.

 

However, on "Module Statistics of Network -> interface statistics" of standby F5 BIG-IP 1600, there are a lot of network traffic on the data interfaces of standby F5 BIG-IP 1600.

 

May you please give some advice on the questions below ?

 

Is the standby F5 BIG-IP also work at the same time as active F5 BIG-IP is working ?

 

OR Is all the network traffic must pass the active F5 BIG-IP 1600 firstly unless active F5 BIG-IP 1600 is down ?

 

Thanks very much,

 

Roc

 

3 Replies

  • All production traffic will pass through the active unit in the HA pair. The traffic you see on your standby unit is probably communication between the two BIG-IP appliances. If you have mirroring enabled, then the active unit will constantly be sending information to the standby in the event of a failover.

     

    You can verify this by running a tcpdump on your standby unit and seeing what source the traffic is coming from:

     

    tcpdump -nni 0.0

     

  • Thanks Cory !

     

    May you please give advice on another question below ?

     

    How can I swap the active F5 role from one F5 BIG-IP 1600 to another F5 BIG-IP 1600 ?

     

    Should I need shut down the active F5 BIG-IP 1600 so that another F5 BIG-IP 1600 can take up the active F5 role ?

     

    Thanks very much !

     

    Regards,

     

    Roc