For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

IBsocl2's avatar
IBsocl2
Icon for Nimbostratus rankNimbostratus
Aug 18, 2023

BIG-IP ASM active/standby to active/active

Hi, Presently we are using ASM Big ip as active/standby due to that we are affecting on CPU high utilization. So, now we are planing to change the BIG IP ASM as active/active. Is it possible to chan...
BIG-IP ASM active standby to active active
security
CeinarF's avatar
CeinarF
Icon for Employee rankEmployee
Aug 18, 2023

Hello,

yes it is possible to do it simply creating a second traffic-group (traffic-group-2) and forcing device 2 (standby unit) as the default device for traffic-group-2. You can follow this guide to do that: https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-device-service-clustering-admin-11-6-0/10.html

After that you have to move the virtual IP you want to be active on traffic-group-2. The following article describe how to do it: https://my.f5.com/manage/s/article/K53040085

Please notify that if you have APM provisioned, APM  is NOT supported in an Active-Active configuration.

If your problem is the high CPU utilization, moving to an Active-Active could be seen as a good solution and maybe you can think that you can add more services because CPU utilization has decreased; take care that an outage of one peer in that scenario will cause a BIG problem.

BR

IBsocl2's avatar
IBsocl2
Icon for Nimbostratus rankNimbostratus
Aug 19, 2023

Hi Ceinar,

While I create a second traffic-group (traffic-group-2) How should I set a default device in that group, Which failover order using to configure "perffer order or Load aware" (device 1 and device2).