Forum Discussion
Not working when Implementing ASM and Load Balancer
Actually now we use ASM without LTM and its working well. But we have a problem when we put Barracuda Load Balancer between ASM and Origin Server (2 Origin server), the problem is request never display on browser. Any body have experience with implementating ASM and Load Balancer? is there any extra configuration in ASM?
This is our scheme:
Users from outside(internet) -> ASM (10.0.32.200) -> Load Balancer (10.0.32.30)-> Origin Server (10.0.32.10 or 10.0.32.20)
This is the detail:
ASM Self-Ip : 10.0.32.50
Virtual Server(Inside ASM) Ipaddress : 10.0.32.200 pool/node : 10.0.32.30 (load balancer ip)
Load Balancer Ipaddress : 10.0.32.30 *10.0.32.10 service all (origin server 1) *10.0.32.20 service all (origin server 2)
Origin Server1 Ipaddress : 10.0.32.10 subnetmask: 255.255.255.0 gateway : 10.0.32.50 (ASM ip) Origin Server2 Ipaddress : 10.0.32.20 subnetmask: 255.255.255.0 gateway : 10.0.32.50 (ASM ip)
So when user access/request page to the Virtual server ASM (10.0.32.200) directly going to Load Balancer (10.0.32.30) and in Load Balancer will directed to origin server 1(10.0.32.10) or origin server 2(10.0.32.20) and Gateway from my origin server is direct to ASM self-ip (10.0.32.50). but the problem is that request never display on browser.
1 Reply
- nathe
Cirrocumulus
Sugeng,
I know of places where they have this setup, although i've not seen the actual setup.
From your comments above, wouldn't the gateway need to be the load balancer, rather than the ASM, as you'd need the return traffic to back through the load balancer?
Are you translating (SNAT pool or SNAT Automap) on the ASM or will the origin servers see the customer's real source IP address?
Sounds like it may be a routing issue.
Rgds
N
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com