For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Vidhya_147819's avatar
Vidhya_147819
Icon for Nimbostratus rankNimbostratus
Apr 11, 2014

ASM on vCMP

Hi All, Good day! I have a question on vCMP deployment with ASM and LTM. What is the best practice and hence the pros/cons of having ASM/LTM in the same vCMP? We are doing end to end SSL and hence having separate ASM and LTM will mean that we will have to have to encrypt decrypt at 2 different vCMPs? Any pointers/links appreciated. There was a thread earlier, but doesnt address the end to end SSL requirement.

 

Looking forward for your help! Cheers, Vidhya

 

application delivery
deployment
design
performance
security
virtualization

1 Reply

  • TechNTactical_1's avatar
    TechNTactical_1
    Historic F5 Account
    Apr 25, 2014

    All dependent on how much resources you have available to you? This is more of an architecture question. What platform are you running? ASM deployed standalone gives you a maximum of one pool member. ASM deployed in line with LTM will give you a scenario like below:

     

    1.) Client Connects to a Virtual Server lets say TEST_VS On LTM 2.) TEST_VS pool member is ASM (Probably a VS on ASM) 3.) ASM VS has pool members that are the back-end servers.

     

    You might have ASM + LTM in a VCMP instance which would give you something like:

     

    Load Balancing Multiple Pool Members DSC (HA) and Sync

     

    The number of times you have to encrypt and decrypt will decrease if you have ASM/LTM in the same VCMP instance. What do you see currently from a SSL TPS?