For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tigrank_92141's avatar
tigrank_92141
Icon for Nimbostratus rankNimbostratus
Nov 05, 2012

F5 load balancer with REST service on the same server as the website

My apologies if this has been answer.

 

I have two servers running a website. The path to the site goes through the F5 load balancer. I'd like to add a web service that the website will consume. Can I get the F5 to load balance the webservice and the website independent so that Server A website can access the webservice through the load balancer and depending on rules can hit the web service on Server A or B. And the same from Server B website.

 

 

The reason I'm asking is because I head from some people that this was not possibel and if it were there would be some complex configuration involved. How true is that? Is this something common and easy to do?

 

 

Thanks

 

config
design

6 Replies

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 05, 2012
    This shouldn't be too complicated. However, can you clarify your requirements please. Are the two website servers different to the web service servers? Are all the servers on the same VLAN/IP Subnet?
  • tigrank_92141's avatar
    tigrank_92141
    Icon for Nimbostratus rankNimbostratus
    Nov 05, 2012
    Both website and webservice are on the same servers. They are in the same IP subnet and same vlan, however they can have different IP addresses if we choose to have that.
  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 05, 2012
    Are they listening on the same port? Regardless, it's rather unusual but you should be able to create a second Virtual Server (that the webservers can target) and use SNAT Automap to ensure the web service traffic passes back through the VS.
  • tigrank_92141's avatar
    tigrank_92141
    Icon for Nimbostratus rankNimbostratus
    Nov 05, 2012
    Well here's the situation. We would like to add a service that handles some of the functionality on the website. Currently that functionality is builtin to the site and calls go direct to a database. We would like to change that to a webservice. But we don't have the infrastructure to put the webservices in a different vlan or subnet behind a different protection layer. So as a half way since the webservice is already built. Until the infrastructure is in place I want to put the webservice on the same servers as the website but still be able to load balance them through the F5.

     

     

    The webservice can be different IP and different port from the website if need be.

     

     

    What's a SNAT automap? Is there online document on it?

     

     

    Many thanks for your help
  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 05, 2012
    I'd recommend you use a dedicated IP for the webservice, in the same subnet is fine. You can find out about SNAT here: http://support.f5.com/kb/en-us/solutions/public/7000/800/sol7820.html?sr=25076545 - hopefully it'll make sense.