For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

TJ_Vreugdenhil's avatar
TJ_Vreugdenhil
Icon for Cirrus rankCirrus
Jan 09, 2019

Reply with External DNS IP's with Internal LTM VIP's

Hi everyone - Environment: * F5 LTM VE (has only Internal LTM VIP's (RFC 1918) * F5 DNS VE (Has internal and DMZ access only to LTM) * Upstream Firewall that NAT's Public IP to Pri...
application delivery
BIG-IP DNS
LTM
topology dns
Rico's avatar
Rico
Icon for Cirrus rankCirrus
Jan 09, 2019

TJ,

 

F5 DNS has a feature that seems to solve your issue. When defining the servers in DNS, you have the option to set a Translation Address and a Destination Address. The destination address is the address returned upon a DNS request whereas the translation address would be the actual IP that is checked for health monitoring. This allows you to have two IP addresses associated with each server, one for internal use (pre-NAT) and one for external use (post-NAT).

 

Here is some helpful documentation on how it is configured.

 

Hope this helps.