Forum Discussion

shahjee_264673's avatar
shahjee_264673
Icon for Nimbostratus rankNimbostratus
May 19, 2016

Big-IP GTM Location

Dears, We have two Data Centers one PRoduction in HQ and one DR, and we have two GTM needs to be installed in both locations. My Question is What is the best practice and recommended location (Physi...
application delivery
BIG-IP
big-ip gtm
LTM
security
Arnaud_Lemaire's avatar
Arnaud_Lemaire
Icon for Employee rankEmployee
May 20, 2016

If talking about internet facing GTM, we try to install the GTM device outside the network (before firewall) as it can help you with :

 

  • handling DDOS attack on DNS service with DNS express feature, in this case Firewall could be a bottleneck
  • testing the whole chain to know if the app is available : fw - network - rp -app

Of course most of the time, this is not allowed and GTM is positionned in public DMZ as it will received internet requests.