For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

santsboy_145140's avatar
santsboy_145140
Icon for Nimbostratus rankNimbostratus
Jul 19, 2014

F5 GTM and Wide IP

Hi,   we are thinking about deploying a GTM/LTM solution for our 2 active/active DCs with 1 GTM and 2 LTMs in each.   A DNS server will delegate to the GTM part of the global domain. And this i...
BIG-IP DNS
deployment
design
Matt_Dierick's avatar
Matt_Dierick
Icon for Employee rankEmployee
Jul 21, 2014

1- is 1.1.1.1 and 2.2.2.2 the Self IPs of the GTMs?

 

[Matt] Nop. 1.1.1.1 and 2.2.2.2 are the listeners on port 53.

 

2- Will the GTM reply to the user request with the Wide IP or the VIP of the LTMs?

 

[Matt] The wide IP is the hostname requested. GTM answer with the LTM's Virtual Servers (the VIPs). GTM answers with the translated public address is needed.

 

3- Will the user have the VIP of the LTM in any action?

 

[Matt] When GTM has answered with the right VIP, user starts a connection to that VIP related to www.example.com

 

4- in case the user only has the WIP, it means that all the traffic going to the user wil go first to the LTM (through SNAT) and then to the GTM, and from the GTM to the user?

 

[Matt] the workflow : users requests DNS type A for www.example.com. DNS server (behind LTM or not) uses CNAME to make the request to the GTM listener address IP (1.1.1.1 or 2.2.2.2). GTM check in his configuration if a wideIP is equal to www.example.com. If yes, GTM answer with a Record Type A to the users corresponding to the right LTM VIP (translated or not).