For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Masui_185's avatar
Kevin_Masui_185
Icon for Nimbostratus rankNimbostratus
Jul 01, 2015

Load Balancing for VMware View 6.0

Hello,

 

We are deploying VMware View 6.0 with multiple Connection Servers. Currently there is only one network for Connection servers and we were planning on configuring one-armed load balancing. Is this method acceptable for View or should we be using a routed architecture? If I understand correctly, with SNAT you will not be able to determine the client's source IP. This may pose an auditing issue from the security team but I'm not sure. Are there any best practices for the architecture and configuration of the F5 with View?

 

We plan to use the iApp to help with the configuration.

 

Thanks in advance

 

application delivery
deployment
design
devops
iApps
performance
security

1 Reply

  • arpydays's avatar
    arpydays
    Icon for Nimbostratus rankNimbostratus
    Jul 02, 2015

    Hi,

     

    the F5 deployment guide for View that goes with the iapp has the standard deployment models and recommendations, I would look at that to start with. I don't think there is too much in it as far as 1-armed over routed model for the connection server flow, whatever suits your topology and yes with SNAT you'll lose the client IP, I don't believe that the CS will log X-forwarded-for either.

     

    https://www.f5.com/pdf/deployment-guides/vmware-view5-iapp-dg.pdf