Forum Discussion
LTM and F5 DNS on same hardware box or using LTM and F5 DNS on different hardware/vcmp guests
Given a choice and no financial concerns, I prefer to run dns and application load balancing on separate devices, *and* license LTM+DNS on the DNS host. If they're going to share the same virtualization platform, it has to be sized to accomodate DDOS capacity.
There's a couple advantages of running LTM+GTM as a package - mostly with L7 irules, and load balancing options for your pools of DNS servers behind the Big-IP DNS system. It's not something that comes up often, but every once in a while, those LTM L7 iRules will be able to save the day against a (D)DOS attack against your dns servers. For running the two concurrently, If they are the only two modules you'll ever run, and you're in a condensed environment, it works well.
If you intend to run more modules on your LTM - AFW, APM, ASM, etc, you'll find that having the DNS separate from the load balancing will provide you with a cleaner interface, and room to stack more relevant L7 modules on the load balancing device.
If you are in a high DDOS risk environment, having the DNS separate from the application services will be a best practice, so you can use the DNS system to monitor and mitigate the attack, and move applications between your datacenters.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
