For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Allanwynn_16283's avatar
Allanwynn_16283
Icon for Nimbostratus rankNimbostratus
Oct 20, 2015

F5 Clustering with different site

Hi Everyone,

 

We will have a project using 4 F5 Big IP.

 

Two (2) Big IP will be on Site A Two (2) Big IP will be on Site B

 

Each site will have two servers to be load balanced.

 

The requirement will be Site A will be the Active site while Site B will be on Standby site.

 

  1. Is this setup possible? Where, two big IP on each site will be clustered and may look/act as one?

(Attached Image)

 

How can we do it?

 

  1. DO we need to setup the servers to be same IP with the other site?

BTW, GTM will not be used in here, it will be purely LTM.

 

Thank you!

 

application delivery
availability
BIG-IP Access Policy Manager (APM)
performance
security
TMOS

5 Replies

  • Amit_Grover_171's avatar
    Amit_Grover_171
    Icon for Nimbostratus rankNimbostratus
    Oct 20, 2015

    Hi,

     

    Does your Site A F5 LTM able to communicate via site B server. I suspect you must have secure MPLS connectivity between site A and site B So If your Site A is able to access your server(at site B) then you can simply use site B server in pool and use "Priority Group Activation" to let Site B server work in standby mode.

     

    If you do not have MPLS then I would suggest create IPSEC VPN in both F5 and then use Priority Group Activation in pool.

     

    /Regards Amit Grover

     

    • Allanwynn_16283's avatar
      Allanwynn_16283
      Icon for Nimbostratus rankNimbostratus
      Oct 20, 2015
      Yes we will have mpls connection. 1. Do we need to let the IP of those servers to be the same IP? 2, Does this mean, the VIrtual Server IP we will use is same between two sites right, and the pool members are the servers from site a and site b? 3. does two f5 for each site applicable?
  • Amit_Grover_171's avatar
    Amit_Grover_171
    Icon for Nimbostratus rankNimbostratus
    Oct 20, 2015

    Hi,

     

    1. Do we need to let the IP of those servers to be the same IP? No, Its not necessary to have same range IP address for servers. You just need to use SNAT/Automap and your problem will be resolved.

    2, Does this mean, the VIrtual Server IP we will use is same between two sites right, and the pool members are the servers from site a and site b?

     

    Virtual IP will be same as user's will hit single IP address (Virtual server ip) and then to pool member.Below is the traffic flow:- User hit URL--> DNS to IP-->VIP/VS---> SNAT-->POOL--->Pool Member(Site A server in active state and site B in standby state)

     

    1. does two f5 for each site applicable? No, only one F5 will work here after using "Priority Group Activation" in Pool member will be in Active standby mode.

    /Regards Amit Grover