Forum Discussion
CirrostratusBigIP-VE in AWS: Multiple external IPs?
So I have built a "Good" BigIP-VE inside an existing AWS VPC, using this guide:
BIG-IP Virtual Edition 12.1.0 and Amazon Web Services: Multi-NIC Setup
I've assigned an Elastic IP to the external NIC, created a VS on the external NIC's IP, and everything works fine.
Problem is, the BigIP-VE needs to host multiple websites, which have different domains and thus different SSL certificates. It seems like I would need the external NIC to have multiple IP addresses, then map a new Elastic IP to each IP address.
Is this possible, or is there a different way I need to go about it?
3 Replies
Yes, you can assign multiple ip's to a single big-ip interface which you then use for another virtual server:443. Once the private ip has been configured on your big-ip interface you map another EIP addresses to the newly created big-ip secondary address.
Here is an alternative option for using a single vs with SNI feature:
https://support.f5.com/csp/article/K13452
John_Heyer_1508Thanks for the reply.
I was stuck on where/how to assign the secondary IP address(es) to be used for the Virtual server(s) as the documentation is very light at that step. Here's the process:
- In EC2 console, under "Network Interfaces", find the external interface for the BigIP
- Right click and select "Manage IP Addresses"
- Assign new IP (10.0.1.202 in their example)
- Go to "Elastic IPs", Associate Address. Select the Network interface, and in the Private IP drop-down you'll see the secondary IP address
- On the BigIP, create a Virtual Server with IP address 10.0.1.202
- Modify security groups according to allowing whatever ports are used by the Virtual Server
Now, what I don't understand is how this would work with HA. It seems since the Virtual Server IPs are mapping to a specific instance, failover would not take place for Virtual Server IP addresses.
Allan_MaiaNimbostratus
Hello,
Related to this situation, every ec2 type has a limit of ipv4 private addresses that can be assingned to a interface (we can have up to 50 private addresses associated to a ENI).
Knowing that we'll have a lot of virtual servers, does someone ever surpassed this situation?
Thanks.
