For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

danielpenna's avatar
danielpenna
Icon for Cirrus rankCirrus
Mar 25, 2015

ASM Sync across AWS Availability Zones

Hi all, I have been working on a solution that synchronizes AWS F5s ( using 11.6.0 HF4 ) between Availability Zones with a large amount of success using SED and SCF files. This has been pretty su...
ASM Advanced WAF
aws
cloud
security
Urs_Schwarz_122's avatar
Urs_Schwarz_122
Icon for Nimbostratus rankNimbostratus
Sep 07, 2015
thank you for your feedback. If I understand correctly, you basically copy over the whole scf file, just replace IP addresses (of SelfIPs, VIPs, eventually routing) and load it. And you sync manually after changes or scheduled periodically. We try to have both standalone boxes active , with some loadbalancing in front. Anyway it will get tricky. Would have been great if F5 handled synchronizing devices separatly from failover: sync should basically be no problem between zones, while taking over IP addresses can't work obviously.