Forum Discussion
NimbostratusF5 load balancing
How would I setup an F5 for proxying only and no load balancing, the device will not be outside the firewall, rather in the dmz proxying to servers on the inside lan. Would this be considered as a reverse proxy?
external>>>firewall>>>bigip(in dmz)>>>internal nodes
3 Replies
Brandon_SwagmanI would set it up as a single node server pool in LTM using either SNAT or putting it inline routing depending on your L3 topology.
tolinrome_13817Thanks, I find it very difficult finding documentation on F5's website on how to use the LTM as a reverse proxy or as you mentioned a single node server pool using snat. How can I find a document from them that explains these setups?
What_Lies_Bene1Cirrostratus
tolinrome. I'd agree around the documentation, however, in most use cases, the F5 simply is a reverse proxy, there's no specific setup required to enable that. In your case, assuming you don't want to use any advanced features, you'll want to do the following per service/server;
1) Setup a node with the IP of the internal server 2) Setup a Pool with the node from 1) configured as it's only Member 3) Setup a Virtual Server and specify a suitable IP address 4) Setup SNAT if required; this will depend on how your routing works, typically you SNAT to ensure return traffic from the 'real server' (the node from 1)) to the client passes through the F5. If it'll do this anyway, no need.
Considering your device's placement, I'd highly recommend you trawl through the LTM/TMOS manuals and spend some time considering the security features described within.
