For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Craig's avatar
Craig
Icon for Nimbostratus rankNimbostratus
Dec 11, 2016

GTM Setup for Exchange with multiple ports on WIP?

Looking for the best practice for setting up Exchange on GTM. Adding a second datacenter that will be active/active. Each datacenter will have an LTM with 3 or so Exchange CAS servers, and each server will handle multiple protocols (HTTPS, POP3, IMAP, etc.) over the same IP/WIP/FQDN.

 

How would you setup the GTM pools for this? Add all the individual protocol VSs, or only a single VS (HTTPS for example), then maybe set that one to be dependent on all the other protocols? The issue I can see is that with a single WIP and multiple protocols, you would want to take the pool/VS offline if one of the protocols is down, but all the others might still be up. Or is there a way to setup the GTM pool like 'all of these must be available otherwise mark the pool down'.

 

Would you setup a Single WIP Pool with VSs from each datacenter in it, or a separate pool for each datacenter? If it's just a single pool with all ports from all DCs in it, if any one of those protocols in a particular DC is down would it just skip that protocol, and continue to use the others? I just can't find any examples of a GTM pool that has multiple ports in it, and how a port is selected.

 

Thanks.

 

1 Reply

  • Craig's avatar
    Craig
    Icon for Nimbostratus rankNimbostratus

    Starting to answer my own questions. I couldn't add multiple port VIPs to the pool, because if ANY of those ports were available it would keep the entire VIP (Which is all GTM/DNS cares about) active. So if ANY port fails I have to fail the entire VIP.

     

    Seems like the best method is back to just having two 'primary' VIPs in the pool, one at each Datacenter, and adding all the other related ports as dependencies to those. That way if any of the ports fail, they would fail the primary VIP and take it out of the GTM pool.

     

    Another option instead of dependency, maybe setup a monitor for EACH port on the pool, that way if one of the VIPs failed any one of the monitors it would take it out of the pool?

     

    Anything else I am missing?