For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nagachn's avatar
nagachn
Icon for Nimbostratus rankNimbostratus
May 10, 2023

Load-balancing generic hosts between different datacenters

Hi all I have GTM F5 Load-balancer sitting in my primary Denver (USA) data center. I have two VPN firewalls sitting in the Chennai (India) data center, where there is no F5 load balancer. Hence the...
devops
gslb
Paulius's avatar
Paulius
Icon for MVP rankMVP
May 11, 2023

nagachn If your intent is to have users connect to one or the other VPN and it's just a single FQDN they would use then I don't see why this wouldn't be possible. Now if I'm misunderstanding what you are attempting to do please add aditional context for us to better understand the ask.

  • nagachn's avatar
    nagachn
    Icon for Nimbostratus rankNimbostratus
    May 11, 2023

    The Firewall has two internet circuits which are differnt  internet service providers. I am running the RAVPN (PA Globl Protect) in both the circuits. Bothe the internet public IP's are mapped with single fqdn (Example:vpntest.xyz.com). The vpntest.xyz.com mapped with both the public ip address. The intention is if one of the Internet circuit goes down then the users can connect the other RAVPN through the secondary internet link automaticall.y

    • Paulius's avatar
      Paulius
      Icon for MVP rankMVP
      May 11, 2023

      nagachn I see no reason that you could not configure 1 FQDN on the GTM that points to the two locations. If you prefer it as active/standy or active/active you can definitely do that. If one of them goes down it will take about 30 seconds (your GTM TTL) to failover utilizing DNS. You can probably setup an ICMP monitor to the IPs in question or something a bit higher in the OSI model but I would start with ICMP.