For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Narendren_S's avatar
Narendren_S
Icon for Nimbostratus rankNimbostratus
Mar 04, 2014

Issue with GTM loadbalancing for Active-Active sites

Hi,

 

Below is the detail regarding the end users, application requirement, GTM/LTM setup and configuration.

 

Details about end users:

 

  • 80% users are from 3 private LANs located at different sites
  • 20% users are from internet

Number of Sites: 2

 

Application requires persistence

 

Each site is having two 1600 F5 units running as Active-Standby(LTM).

 

And all the 4 units are having GTM module enabled and configured in Active-Active mode.

 

Current Configuration and Issues

 

  • GTM Loadbalancing Method: Topology
  • Persistence: Enabled

Topology Details:

 

  • Private End user LAN Segments are grouped as PRIVATE_LAN - 80% of users
  • IPs not matched PRIVATE_LAN are grouped as PUBLIC - 20% of users

GTM pool is selected based on the end user type

 

  • Both private and public GTM pools are having pool members(LTM VIPs) of both the sites.
  • pool members are having loadbalancing method as round robin.

GTM Loadbalancing Issue

 

In this setup, DNS requests from internet users (PUBLIC) are loadbalanced properly and resolved to both the site LTM VIPs properly, since DNS queries are coming from different ISPs at geographically different location.

 

However, PRIVATE_LAN user DNS queries are originated via very few DNS servers and hence loadbalancing is not happening properly.

 

Note: Consider we have enabled GTM persistence. (as per application requirement)

 

If 1000 requests originated from a private LAN, all those DNS requests resolved to single site LTM VIP since DNS persisted.

 

We require both PUBLIC and PRIVATE_LAN user requests should be loadbalanced to both the GTM sites and persistence should work for the application.

 

It will be great if someone suggest a best solution.

 

1 Reply

  • bhs_114985's avatar
    bhs_114985
    Historic F5 Account

    Hello,

     

    "However, PRIVATE_LAN user DNS queries are originated via very few DNS servers and hence loadbalancing is not happening properly. Note: Consider we have enabled GTM persistence. (as per application requirement) If 1000 requests originated from a private LAN, all those DNS requests resolved to single site LTM VIP since DNS persisted."

     

    • Check your TTL's.
    • Make sure your internal DNS servers can all get to the GTM's.
    • Make sure no internal caching server is in play.
    • Make sure your LB Method is Round Robin with no persistence.
    • You could always do an iRule to drop persistence but still load balance if the requesting dns server/s ip equals X.