For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

STTR_85331's avatar
STTR_85331
Icon for Nimbostratus rankNimbostratus
Mar 31, 2011

LTM DMZ Design Question

Greetings,     We have been running a pair of LTMs in production for several years in what I would consider "one-armed" mode in that the traffic flows as follows:     Internet<-->Firewall...
config
design
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Mar 31, 2011
My 2p... I don't bother load balancing protocols that load-balance themselves. e.g. SMTP. HTTP always. ftp sometimes...

 

 

One architecture I've had good experiences with (One that a colleague came up with. Hi Clarkie!) is to put the F5 between the firewall ad the DMZ's. You can use the F5 to route traffic vioa the firewall still where it has to traverse from one DMZ to another. And everything can be load-balanced without having to worry about firewalling (Because the firewall does it still), or SNAT.

 

 

H