Multiple VLANs and routing

Joe,

 

 

I'm guessing that since you are using SNATs that you don't need to maintain source address information at layer 3. Correct?

 

 

If that is the case you can configure the VSs with pool members in the same network as the VS itself and use SNAT Automap feature. Then make sure the pool members use your router/FW device as their default gateway.

 

 

In this way, per your listed requirement, client connections to a VS must traverse your router/FW to reach the VS since it will be in the same network as your pool members. Also, the BigIP won't be sending traffic from a VS in vlan A to members in vlanB.

 

 

Pool members will know to send return traffic via the BigIP because it will appears sourced from the BigIP via SNAT Automap. Connections created this way will be subject to the auto last hop feature and return traffic will be sent via the same path instead of the BigIP's default gateway so there is no need for any routing tricks like forwarding VSs and static routes on your pool members.

 

 

As for your performance issues: I cannot say specifically, but it has been my general experience that performance degradation that disappears when only one member is in the pool are the result of a need for, or misconfiguration of, a persistence profile.

 

 

Hopefully this helps simplify your network setup a bit for you and weed out your performance issues.