Forum Discussion
tolinrome_13817
Nimbostratus
NimbostratusLoad Balancing different interfaces
The way I have the BigIP is connected directly to the DMZ interface and then all proxying goes back through the firewall to hosts on the inside interface. But, can the F5 in this particular setup als...
You have the LTM in front of the firewall? My LTMs load balance both internal and DMZ, but all interfaces are behind the firewall. Be careful with your routing, as you can definitely get into trouble. I have no experience with it, but I'd look at route domains to keep DMZ and internal separate. Also be mindful of the problems your firewall can cause. Unless you manage both, it can turn into a lot of finger pointing when there is a problem.
In a perfect world, if I'm load balancing internal and DMZ VIPs, I'd prefer separate LTMs.
Chris
Kevin_Stewart
Employee
EmployeeYes, you can absolutely load balance between services internally (assuming the pool members to route TO the BIG-IP). The one thing you'll most certainly need to do though is to apply a SNAT profile to these internal VIPs to force return routing.