For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shailender_1542's avatar
Shailender_1542
Icon for Nimbostratus rankNimbostratus
Nov 03, 2015

GTM + LTM on Same Device , GTM has Public IP and LTM-VS has private IP , how client on internet communicate with Servers

Hi Experts,   I need to understand the traffic flow for my situation and how it will work.   We have 2 Sites. both have BIG-IP in HA Pair. both pair will work as GTM + LTM Serves under LTM h...
availability
BIG-IP Access Policy Manager (APM)
devops
security
TMOS
TMSH
Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Nov 03, 2015

Your wideIP should resolve public IPs for the virtual servers to receive traffic from the internet. Thos public IPs can either live on the virtual servers themselves(preferred) or can be NAT's upstream by a firewall or some other device. If you make you virtual servers with public IPs directly GTM and "auto discover" the virtual servers automatically rather than having to manually create the virtual server in the GTM context.

 

https://support.f5.com/kb/en-us/products/big-ip_gtm/manuals/product/gtm-implementations-11-3-0/7.html

 

Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Nov 03, 2015
Technically you could get away with the 1 public as HTTP/S and DNS run on different ports, but its more of a question if you want that traffic on the same IP address. Also, you say you have 2 sites, if they are both HTTPS that will require you to use SNI. While you can get away with this 1 public IP approach, most don't do this. One reason is rDNS. Reverse DNS can only point to one FQDN and I assumer the name of your NS records will be different than your sites.