For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nathan_67739's avatar
Nathan_67739
Icon for Nimbostratus rankNimbostratus
Jan 15, 2010

Forcing "routed" traffic back to gateway

We currently have a LTM 3600 (running 10.0.1), set up in a router-on-a-stick model (vlan based network with backend servers and VIPs logically, but not physically, behind the LTM).     We a...
config
design
Nathan_67739's avatar
Nathan_67739
Icon for Nimbostratus rankNimbostratus
Jan 16, 2010
Hmm... I could certainly create additional "fake/duplicate/etc" gateways upstream from the LTM, but what's going to cause the LTM to actually send it to that gateway, since it knows about the subnet as being directly attached?

 

 

Or are you saying to eliminate the LTM self-ip on 10.2/10.3? In that case, I don't think any load balancing would work unless I went to SNAT for everything. Right now, the backend servers (mostly, have 3-5 out of 100+ vips using SNAT) all see the real client IPs. Going full SNAT would definitely allow this to work - at that point, the LTM would not need to do any routing.