Forum Discussion
nagachn
Nimbostratus
NimbostratusLoad-balancing generic hosts between different datacenters
Hi all I have GTM F5 Load-balancer sitting in my primary Denver (USA) data center. I have two VPN firewalls sitting in the Chennai (India) data center, where there is no F5 load balancer. Hence the...
Paulius
MVP
MVPnagachn If your intent is to have users connect to one or the other VPN and it's just a single FQDN they would use then I don't see why this wouldn't be possible. Now if I'm misunderstanding what you are attempting to do please add aditional context for us to better understand the ask.
nagachnThe Firewall has two internet circuits which are differnt internet service providers. I am running the RAVPN (PA Globl Protect) in both the circuits. Bothe the internet public IP's are mapped with single fqdn (Example:vpntest.xyz.com). The vpntest.xyz.com mapped with both the public ip address. The intention is if one of the Internet circuit goes down then the users can connect the other RAVPN through the secondary internet link automaticall.y
- Paulius
nagachn I see no reason that you could not configure 1 FQDN on the GTM that points to the two locations. If you prefer it as active/standy or active/active you can definitely do that. If one of them goes down it will take about 30 seconds (your GTM TTL) to failover utilizing DNS. You can probably setup an ICMP monitor to the IPs in question or something a bit higher in the OSI model but I would start with ICMP.