For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

VaUk89's avatar
VaUk89
Icon for Nimbostratus rankNimbostratus
Aug 21, 2019

Load balancing without hiding the servers ip

Hello, I would like to have a load balancer VS that will redirect the client to the web server members of the pool.   For example if I ping VS 10.195.10.10 it should return the hostname of the w...
application delivery
BIG-IP
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Sep 23, 2019

Hi,

 

I think there is confusion.

indeed the VS L4 can transmit ICMP packets but will not return the PTR of the IP backend but that of the IP of the VS.

 

keep in mind the following points:

- the ping will be well transmitted to the backend but the hostname returned is still that of the VS (we are on the ICMP protocol)

 

on the other hand, the backend can return you its hostname in the HTTP header. the problem that you are likely to have is that once the hostname of backend returned, you will reach the server without going through F5 ...

 

hope it's clear.

 

what is your need? we could help you

 

regards

VaUk89's avatar
VaUk89
Icon for Nimbostratus rankNimbostratus
Oct 01, 2019
Hello youseef, Thank you for your help with this. The situation is quite unusual as the vendor of the software (Sunsystem) is requiring that the servers behind the load balancer should be able to be contacted by the main application server. Basically the application will try to ping and resolve the hostname of the 3 server that sits behind the f5 but obviously fails because the VS is answering instead. I totally agree with you that is pointless to directly reach the servers without going trough load balancer, but I cannot really find a solution for this. Any other idea?