Forum Discussion

tushar2k_312391's avatar
tushar2k_312391
Icon for Nimbostratus rankNimbostratus
Aug 31, 2018

Config of Generic host with multiport.

We have to configure generic host with multiple ports. If any one port goes down that generic host should not respond. How can we achieve this. Do we need to configure multiple generic host with separate ports or we can configure only one Generic host with all ports configured under it and with multiple health monitors.

 

  • I guess the answer depends on the definition of "multiple ports". Is it a specific set of ports, or any/all ports?

     

    If it's any/all ports, you can simply create a VIP with a wildcard port (*), disable port translation, and send to a pool that also uses wildcard ports. A request coming in to IP:1414 will get sent to the pool on port 1414, and hopefully there will be a server there listening on port 1414 to receive this.

     

    If it's a specific set of ports, you cannot define a single VIP this way. You can allow all ports and then limit what's accepted in an iRule (blocking everything else).

     

    On the monitor question, you'd want to use a port-agnostic monitor, like an ICMP 'ping'.

     

  • it's depending,

     

    the best solution, if you only had a few ports to manage is to create a specific HOST / VS for each port.

     

    That will allow you to monitor independently the differents ports/service. And to do a specific configuration for each Host if needed...

     

    Hope it's clear.

     

  • Its a specific set of Port i.e. port 21 and 22. So I have to allow all ports for this VIP then I can assign moniter of port 21 and 22 on this VIP. Is this right? But is it feasible to allow all ports by considering security.

     

  • You really have two choices:

     

    • Allow all ports and disable non-accepted ports via iRule or LTM policy

       

    • Create two separate VIPs, one per port