Forum Discussion

Enfield303's avatar
Icon for Nimbostratus rankNimbostratus
Nov 19, 2020

Azure Big IP F5 template with HA via LB

Hello All, I have deployed two Big IP virtual appliances into Micosoft Azure using the following template:

I ran accross the problem detailed here ( but once I manually set the failover network and mirroring network IP address both devices synced in an Active/Sandby configuration.


My question now is how does the Azure loadbalancer in front of these F5 devices pass traffic / manage failover for them? The Azure loadbalancer as deployed from the template has the F5 external addresses in a back-end pool but there are no health probes, loadbalancing rules or inbound NAT rules defined - does all this have to be done manually similar to what is documented here? : -


Thanks for any help

4 Replies

  • On a related note, the advice for using an Azure LB for failover seems to be to use a wildcard, network range or different ports for the VIP - but what if I have multiple *seperate* apps that use the *same* port? - if the secondary IP addresses are on a /24 subnet do I need to further subnet that to differentiate between different apps? - or should I use DSR instead?

    DSR does seem to simplify a lot of this but Jeff Giroux seems to not recommend it generally.

  • So it look like for more virtual servers the advice is to add more secondary IP configurations to the ext interface on the F5s:

    • Jim_M's avatar
      Icon for Cirrus rankCirrus

      The 'adding more secondary IP' approach is working well for me. However, each F5 in the HA cluster will have differing IPs for their VIPs. So how can i keep config in sync if the 2 configs have to differ?

      • Enfield303's avatar
        Icon for Nimbostratus rankNimbostratus

        Hello Jim I created a shared object that contained both F5 IPs and used that shared object for the VIP