For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jmanya_44531's avatar
jmanya_44531
Icon for Nimbostratus rankNimbostratus
Oct 19, 2012

Balancing Inbound SSL VPN Connections with Link Controller

Hello guys,

 

Hope you could help me ASAP,

 

There is an scenary where a Link Controller is an option to be deployed. The main requirement is to manage the balancing of inbound and outbound traffic over three links. Among inbound, there is some traffic related to SSL VPN connections performed towards another devide which manages such connections. At this point, is it possible to load balance such connections? In case of it is possible, there is any consideration to take care? I guess that any type of persistence or SNAT+iRule must be performed to enhance the performance...

 

What about trying such implementation with LTM+GTM??

 

 

Hope you could respond as soon as you can.

 

Thanks in advance

 

Regards,

 

config
design

3 Replies

  • Techgeeeg's avatar
    Techgeeeg
    Icon for Nimbostratus rankNimbostratus
    Oct 24, 2012
    Hi ,

     

    Inbound load balancing of the SSL VPN connection is possible for this you may use LC or LTM+GTM you have to have the users connecting to the SSL VPN using a URL which will be the wide IP in the LC this wide IP then will have the IP from multiple ISP as the VS pointing to this single device on which the SSL VPN terminates. I hope this is clear to you.

     

     

    Regards,

     

  • jmanya_44531's avatar
    jmanya_44531
    Icon for Nimbostratus rankNimbostratus
    Oct 26, 2012
    Hello,

     

     

    Thanks for responding. Appreciate that.

     

     

    That's clear now. But, is there the option to assure that the tunnel isn't interrupted while the connection lasts? Maybe it is better to deploy a persistence method to guarantee that the connection goes through the same ISP link the whole time (even if there is a fail connection in the middle of the session time) since it is established until it is closed. What about deploying SNAT or any iRule to accomplish this?

     

     

    Thanks in advance for your reply

     

     

    Regards,
    • Antonio_Costa_9's avatar
      Antonio_Costa_9
      Icon for Nimbostratus rankNimbostratus
      Feb 11, 2014
      Which firewall of SSL VPN solution will be used behind LC or LTM+GTM ? Also, allways consider LTM+LC for bidirectional link loadbalancing and LTM+GTM when you need the same but with 2 or more spare sites/datacenters.