For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

fabiogarcia_145's avatar
fabiogarcia_145
Icon for Nimbostratus rankNimbostratus
Mar 25, 2014

Outbound traffic - How to migrate sessions automatically from ISP01 to ISP02 (case of link failure)

Dears, We have today only outbound traffic being implemented. we have 2 ISPs w/ method "Ratio Member", and ratio ISP01 w/ 2 ISP01 w/1.

 

We checked when ISP01 goes down for example, everybody who were using that Link become stuck w/ all sessions...

 

For example, we were testing www.whatsmyip.com... we got ISP01 as outbound IP....when we disconnect ISP01 router, we were not able to receive the other outbound IP.... Only if we wait some minutes (session expiration)

 

How can I get Big IP working as a full proxy, then the session should migrate from an ISP to another automatically ?

 

Thanks in advance!!!

 

3 Replies

  • a couple questions 1. does BIG-IP connect directly to the ISPs, or through similar or different gateway routers? 2. is a monitor being used to mark ISP01 status? 3. what does your outbound traffic configuration on BIG-IP look like?
  • high level of configuration for outbound is here: http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-11-5-0/2.htmlconceptid
  • Hi Jason, thank you very much! Replying your questions: - Big IP is connected directly to ISP routers (actually there is a Cisco Switch between them) - Monitor used is GW_ICMP, pointing to 8.8.8.8 w/ transparent enabled. (below screen shots for both monitors (Link Controller & Local Traffic)

     

     

    • Config is: We created a VS_outbound, w/ pool_internet w/ 2 members ISP01 and ISP02... At pool config we use method ration_member... everything works fine when both ISPs are good...

    I checked the link you have sent and everything is OK according that config... main problem happens when one ISP goes DOWN... no session migration happens...

     

    thanks!