Hot-Hot Datacenters with DNS LTM APM SSO

Another available option is to use GTM with "global availability option" defined in the pool for the wide ip. (It's similar to priority group activation in LTM, so all your client would resolve/connect to your primary pair of F5s and if they become unavailable, then GTM would resolve to the secondary pair in the other DC only if the primary become unavailable. (Note clients would have to re-connect/re-authenticate as the F5s in opposite DC wouldn't have any APM session states/info) But with this you wouldn't have active/active between DCs, it would be more of Active/standby for apps between DCs. Good luck, let us know what you come up with or if you have any other ideas!