For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nilesh_Dubey_36's avatar
Nilesh_Dubey_36
Icon for Nimbostratus rankNimbostratus
Nov 13, 2018

DSR or Inline mode configuration

Hi,   Can we configure DSR or inline mode for a single VS. If yes, please tell me the method. Actually one of my client asking me to configure the F5 in way so that he can use the client IP for au...
application delivery
LTM
Nilesh_Dubey_36's avatar
Nilesh_Dubey_36
Icon for Nimbostratus rankNimbostratus
Nov 14, 2018

I think in Inline mode, we need to configure VLAN selfIP as gateway on server and traffic flow would be like- Client---------> F5------->pool member pool member--------->F5----------->Client Disadvantage is all traffics will be moving through F5 and it will increase the overload of F5

 

While in DSR mode we need to configure loopback IP on server and traffic flow would be like- Client---------> F5------->pool member Pool member--------->Switch( Default Gateway) ----------->Client Please find the article for DSR- https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-11-6-0/5.html

 

Please correct me if I am wrong.

 

Thanks, Nilesh

 

Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Nov 14, 2018

That is a correct understanding.

 

In-line (or in-path) configurations have the advantage of allowing far more comprehensive traffic manipulation and control for incoming and outgoing traffic. And while it does have a higher throughput requirement, this is usually not the limiting factor for LTM performance (depending on the device and load).