Forum Discussion

Dmetcalfe_13626's avatar
Dmetcalfe_13626
Icon for Nimbostratus rankNimbostratus
Jul 17, 2014

Inline load balancing

So, I know this question has been asked before but there appears to be no clear answer. I need to preserve the source IP so that our spam server can detect brute force hack attempts on a customer fac...
application delivery
design
LTM
mimlo_61970's avatar
mimlo_61970
Icon for Cumulonimbus rankCumulonimbus
Jul 18, 2014

The way I have implemented this is as follows.

 

I have an external interface, this is the interface/subnet that my virtual server IP addresses are on. I have an internal interface, this is the interface/subnet that the backend virtual servers are on. There is a router on the external interface, which is the default gateway for the F5.

 

On the internal interface, I have a virtual server, with a destination network of 0.0.0.0 mask 0.0.0.0. It is a Performance Layer 4 type VS, for all ports and all protocols. The default pool for this VS contains the IP address of the router that sits infront of the external interface. My backend servers then use the floating self-ip as their default gateway.

 

There are other ways to accomplish this as well. See http://support.f5.com/kb/en-us/solutions/public/7000/500/sol7595.html for more info. You can setup a forwarding server that does use the routing table of the F5 to determine the next hop.

 

Dmetcalfe_13626's avatar
Dmetcalfe_13626
Icon for Nimbostratus rankNimbostratus
Jul 18, 2014
Wow, that is super helpful. Thanks mimlo! Your second suggestion was the one I first tried but the first suggestion is an awesome idea too. I will try it. Thanks again.