For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

omair_siddiqui_'s avatar
omair_siddiqui_
Icon for Nimbostratus rankNimbostratus
Jun 25, 2010

Link controller placement

Hi:

 

 

I am new to F5 technology. One of my customer is using a single router for redundant link for internet links and a firewall that is seperating inside from outisde. They have purchased LC to load balance outbound request using these links. Now what is best place for LC.

 

 

I think either they would need one more router for second ISP or alternatively they should terminate WAN links to LC. Whats your opinin

 

basic
getting started
new to f5

1 Reply

  • Chris_Miller's avatar
    Chris_Miller
    Icon for Altostratus rankAltostratus
    Jul 03, 2010
    It really depends on whether they're looking at LC from a load balancing perspective, a redundancy perspective, or both. If they want to maintain outbound access if a router fails, obviously they need more than one router.

     

     

    I wouldn't terminate the Links on the LC, but that's just me. In the current environment, I'd make sure the LC has an ip address on each internet link, and also give it a private address. I would see the flow being something like this:

     

     

    1. User tries to go to the public internet.

     

    2. The request routes through the firewall, and then gets sent from the firewall to the LinkController which then chooses an Internet Link to send the traffic out.

     

     

    I'd assume the Firewall has an address on the client network and the public network or another dmz of some sort. The firewall's next hop in my example would be the LinkController.