Forum Discussion
F5Newbie
Altostratus
AltostratusHow to make outbound traffic to flow through an F5
Hello, We have an F5 LTM that front our backend middleware server-pair in a HA setup. So F5 serves as a LB that forward incoming traffic to the active one. But we also need the backend server...
hoolio
Cirrostratus
CirrostratusHi Dwayne,
You could potentially use an EAV monitor which references a shell script. The script could check the pool members to see if each is active.
I'm not sure how you'd want to detect a "recent" failure. Perhaps it would be better to have a majority of that logic set up on the servers themselves and just have the monitoring done from GTM.
Here is a related AskF5 solution:
SOL8154: The BIG-IP GTM EAV monitor considerations
http://support.f5.com/kb/en-us/solutions/public/8000/100/sol8154.html?sr=12322442
And here is a template EAV. It should work the same for GTM as LTM:
http://devcentral.f5.com/wiki/default.aspx/AdvDesignConfig/TemplateForExternalLtmMonitors.html
Aaron
- hoolioHi Craig,
That depends on your security requirements. Many customers use the same BIG-IP with separate VLANs to isolate networks. You could further isolate networks using route domains. Or for newer Viprions on 11.x, you could use vCMP to create virtual BIG-IP instances.
It might be worth talking with your F5 or partner SE to go over your exact scenario.
Aaron 
Josh_41258Nimbostratus
Craig - we host both DMZ and internal applications on a single pair. As Aaron stated, you can simply trunk multiple VLAN's to your BIG-IPs (one for your DMZ, one for your internal stuff, etc).
Josh
HamishCirrocumulus
You can... But I wouldn't... Unless it's a Viprion and you're using separate vCMP guests for DMZ and internal.
You have firewalls between DMZ and internal for a reason. One of those is a single point of control. Having a single system 'bridge' the firewall like this can lead to security leaks.
H- nitass
Employee
You have firewalls between DMZ and internal for a reason. One of those is a single point of control. Having a single system 'bridge' the firewall like this can lead to security leaks. thinking if route domain is helpful in migitgating the security leak. - HamishIt helps. But i still wouldnt bridge different levels of security like that. Bridging between zones of the same level i have done in the past. But dmz to internal is one i wouldnt do... Especially if a different team admin the firewall and bigip...
H
![\"F5](\"https://www.f5.com/content/dam/f5/f5-logo.svg\"){kind=logo}
