For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cred_olt_205219's avatar
cred_olt_205219
Icon for Nimbostratus rankNimbostratus
Jun 04, 2015

RD Connection Broker and APM\LTM

Hey all,

 

I am working with an RDS Design for a 2012 Deployment as follows:

 

1) F5 APM\LTM Modules 2) 2 x RD Connection Brokers in HA Mode 3) 8 x RD Session Hosts

 

I am thinking the following at a high level:

 

1) APM with WebTop to present applications and eliminate requirement for Web Access and Gateway Roles.(Internal and External Interface) 2) LTM Load-Balancing RDCB Servers in HA Mode. 3) LTM Load-Balancing Session Hosts

 

I am just trying to wrap my head around if this is a supported configuration or not. When I am reading the support guides, it does not appear to link up as an exact scenario. I am also trying to understand what advantage the RDCB model would have over just shipping directly from APM to the LTM Managed Session Host Servers and eliminate the complexity of RDCB in an HA Deployment.

 

Any help or suggestions would be greatly appreciated.

 

Thanks,

 

application delivery
availability
BIG-IP Access Policy Manager (APM)
design
devops
iApps
LTM
security

5 Replies

  • cred_olt_205219's avatar
    cred_olt_205219
    Icon for Nimbostratus rankNimbostratus
    Jun 04, 2015
    I had a lapse in judgement....looks like the RDCB is a requirement to re-establish existing sessions....but the question still comes up if I would be in a supported config to route from APM to RDCB directly.
  • mikeshimkus_111's avatar
    mikeshimkus_111
    Historic F5 Account
    Jun 05, 2015

    Hi, when using APM as a RDP gateway, there's no communication between the two. If you are connecting to an RDSH farm, you'll still need the broker to manage the sessions there, but unlike RD Gateway APM will not make a request to the connection broker so there's no need to load balance it on the BIG-IP.

     

  • cred_olt_205219's avatar
    cred_olt_205219
    Icon for Nimbostratus rankNimbostratus
    Jun 06, 2015

    OK....So it runs APM > LTM > Session Host Farm

     

    And then the Session Host Connects back to the RDCB....but I will be configuring the RDCB in High Availability Mode....so I am assuming I will need to Load Balance the Set for the Session Hosts to connect back to then?

     

    Thanks guys,

     

    Justin

     

    • mikeshimkus_111's avatar
      mikeshimkus_111
      Historic F5 Account
      Jun 08, 2015
      In my experience, the RDCB HA name only gets used by RD Gateway servers. Session hosts seem to always use individual Connection Broker server names. So you wouldn't need to load balanced the Connection Broker in this case.
  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus
    Jun 14, 2015

    1) APM with WebTop to present applications and eliminate requirement for Web Access and Gateway Roles.(Internal and External Interface)

     

    I don't think currently APM supports webtop to replace RD web.