For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Wasfi_182818's avatar
Wasfi_182818
Icon for Altostratus rankAltostratus
Aug 11, 2016

Deploying LTM, GTM and ASM on the same appliance?

Hi;

 

I would like to ask if it is possible to have LTM doing load balancing plus (ssl decryption of https requests then re-encryption and ssl decryption of https responses then re-encryption)

 

As well as GTM and ASM running on the same 1 Gig throughput BIG-IP AWS cloud based virtual appliance. Please note the the overall load is distributed between 3 cloud based BIG-IPs in 3 data centres "zones" using GTM.

 

From the perspective of "Memory and CPU" on the cloud based BIG-IPs, is this possible?

 

Kindly Wasfi

 

application delivery
BIG-IP DNS
cloud

1 Reply

  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Aug 11, 2016

    It depends ;-)

     

    I think LTM + GTM is quite reasonable but ASM tends to consume cpu resources quite a bit and can cause issues. You would have to think in terms of what are the main pain points you are solving. I mean, some applications/accounts tend to be targeted for DNS based DDoS/DoS and in this case, having a separate GTM helps as you are not sacrificing your LTM or ASM when there is a DNS level attack. What kind of signatures are you intending to utilize on ASM is important too as some signatures can consume a lot of resources. Do you have access to an F5 SE - might provide a better answer based on your unique needs.