Forum Discussion

Evgeny_Kogan_51's avatar
Evgeny_Kogan_51
Icon for Nimbostratus rankNimbostratus
Dec 21, 2006

How to control the connections within failover

Hi All !

 

 

I would like to know if its possible to write an iRule or iControl, which will control my active connections within failover, and here is an example:

 

I have BIGIP which is deployed as a Load Balancer for three Firewalls. I am not using Firewall Sandwich, therefore I have a problem to route back connections to a proper Firewall module.

 

 

LB(BIGIP)

 

|

 

 

FW1 ---- FW2 ------ FW3

 

 

I need LB to move all active connections only of FW1 to FW2 in case when FW1 goes down.

 

The FW3 should not get any of connections which were opened to the FW1, all of them should be moved to the FW2 only.

 

 

All new connections comming to the LB should be balanced between FW2 and FW3 in a regular basis (round robin).

 

 

thanx !
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    It sounds like what you're looking for is a pretty basic load balancing setup using minimum active members and priority groups. I would think this would be sufficient to allow FW2 to take over all traffic incoming if FW1 goes down.

     

     

    Colin