For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chuck_Brantley_'s avatar
Chuck_Brantley_
Icon for Nimbostratus rankNimbostratus
Apr 17, 2014

Inline F5 not working

Scenario:   Two real servers behind the F5. Real server have the F5 private interface as their DG. VIP is setup for the pool with the two real servers. Forwarding VIP is setup for inbound and ou...
application delivery
availability
design
LTM
Chuck_Brantley_'s avatar
Chuck_Brantley_
Icon for Nimbostratus rankNimbostratus
Apr 18, 2014

No, that isn't what the load balancing is for. The servers are actually being load balanced for a purpose. The forwarding VIP was just added so the server admin could reach their server to perform administrative functions.

 

There is a normal a VIP for access to the pool to test load balancing HTTP. This is the part that is not working. The client can reach HTTP to a real server IP but not through the VIP.

 

There were some issues with the forwarding VIP b/c a server behind the F5 couldn't access resources without having SNAT turned on. This breaks the application such as Cisco ISE since the server logs the client source IP. The F5 engineer stated there was asymmetric routing somewhere but we couldn't find it.