For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

th_93192's avatar
th_93192
Icon for Nimbostratus rankNimbostratus
Mar 13, 2013

clone pools layer2 adjacency?

We are trying to replicate traffic coming into a virtual server to an additional set of server(s) for purposes of side by side testing with 'real' traffic before going live. The clone pool feature se...
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Mar 13, 2013
My conclusion is that clonepools will not work unless the LTM and clonepool target server are layer 2 adjacent?

i think so.

 

 

Clone pool traffic is sent from the BIG-IP system to the IDS system (clone pool member) using the IDS system's L2 MAC address. Other packet header information contained in the clone pool traffic, such as the L3 addressing, remains the same as in the original packet sent to the virtual server pool member.

sol8573: Configuring the BIG-IP system to send traffic to an intrusion detection system (9.x - 10.x)

 

http://support.f5.com/kb/en-us/solutions/public/8000/500/sol8573.html

 

 

I have played around with npath in the past and remember that requires pool members be 'directly connected' on a common VLAN to the LTM

i understand l3 npath is also possible.

 

 

sol13403: Configuring Layer 3 nPath load balancing and monitoring

 

http://support.f5.com/kb/en-us/solutions/public/13000/400/sol13403