Forum Discussion
Alexandre_Demasi
Nimbostratus
NimbostratusF5 BigIp cluster active/stanby in Azure, failover very slow
Hello,
I'm contacting you because I need to configure a F5 BigIp cluster in active/stanby in Azure, and I'm encountering a problem with failover.
My infrastructure and part of the configuration looks like this:
With the mentioned iRules, the failover goes fine.
My problem is that it's dramatically slow (between 30 seconds and 3 minutes for the ALB to realize the failover).
Do you know a way of minimizing this delay?
Thanks in advance for your help.
- whisperer
MVP
HA works completely different in cloud environments due to abstraction of L2 networking. Instead, I would just run a few active BIG-IP instances and load balance via DNS. More specifically, I would use terraform or ansible or some other automation framework to auto-build my cloud BIG-IP instances based off some github managed master configuration. Then I would use cloud native automation tools to manage the DNS entries. Sadly, there is no way to minimize HA failover delay in the cloud.... you are trying to fit a square peg into a triangle hole. F5 HA was designed for connected and local traditional L2 network designs. You dont have that with cloud so trying to replicate similar functionality is really a hack. Go active w/ DNS based failover.
A BETTER way, would be to look into F5 Distributed Cloud for HTTP/S workloads.
- Nikoolayy1
The Azure API is much slower than AWS API for example and as F5 in the cloud uses CFE as when there is a failover the F5 needs to call the API to change the elastic IP address attachment as cloud environments do not support GARP this is where the issue with more than a minute failover is seen.
Use Azure ALB for failover for ASM and LTM deployments as this was used in the old F5 azure arm templates but now you can modify the autoscale group if needed:
Lightboard Lessons: BIG-IP Deployments in Azure Cl... - DevCentral (f5.com)
For APM VPN deployments I suggest use F5 GTM and standalone APM devices:
- Alexandre_Demasi
Thank you for your answers.
I'll keep looking, starting with the links and ideas you mentioned.Have a nice day.
