For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

buzzkiller's avatar
buzzkiller
Icon for Altocumulus rankAltocumulus
Jan 10, 2025

How is CPU/Memory shared across Virtual Servers?

Greetings,   Suppose we have two websites, example1.com and example2.com, both exposed to the internet through an F5 Big-IP. Now, let’s imagine an attacker launches a DDoS attack targeting example...
security
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Jan 14, 2025

To be honest you probably need 2 tier design with Tier 1 being F5 with AFM and maybe DNS/GTM module for protection for layer3/4 attacks and then the Tier2 being AWAF/LTM/APM (whatever you need). You can connect your AFM can use BGP flowspec to block the DOS attackers at the ISP level as to remove stress from the system BIG-IP AFM: Security for Data Center DDoS Protection Solution Overview

 

Tier 1 can also be scrubbing center/Cloud like F5 XC Distributed Cloud for example. AWAF will protect against Web attacks and layer 7 Web DOS that is not with a big volume like layer 3/4.