Forum Discussion

SSHSSH_97332's avatar
SSHSSH_97332
Icon for Nimbostratus rankNimbostratus
Aug 16, 2013

Mirroring F5 LTM Traffic

we have IDS & needs to mirror all traffic to it can F5 send traffic to it , is the below still valid at Version 11 :   http://support.f5.com/kb/en-us/archived_products/big-ip/manuals/product/bigi...
availability
deployment
  • RoutingLoop_179's avatar
    RoutingLoop_179
    Aug 16, 2013

    Yes I believe it is, you should look at pool clones. In v11 you can essentially create another pool containing your IDS devices and then associate this pool as a cloned pool on your VS either client side or server side. Take a look here - I think this is what you are asking for, it describes pool cloning a bit more. http://support.f5.com/kb/en-us/solutions/public/13000/300/sol13392.html

     

iaine's avatar
iaine
Icon for Nacreous rankNacreous
Aug 19, 2013

Rather than going down the cloning pool route when I set this up a while back, I set up Interface Mirroring instead and then let the IDS filter out what it needed. My reasoning being that a network SPAN would probably less CPU intensive than the inspection needed to clone a specific service