reroute traffic to another VIP after passing to App Server in the back-end

Question

I'm looking that explains how can I reroute traffic after coming from one VIP to the app servers to go back to a second VIP to load-balance between database servers. Do the latter need to be attached to the F5 like the app servers? Lastly but not least can we do this if we have LTM license only? Thanks

alexbct · Answer

&gt;&gt; I'm assuming the 3rd step is to configure something o the app servers who are on the back-end of the F5.&nbsp;&nbsp;Correct, it will be somewhere in the App servers that you configure the IP for the db-VS. &nbsp;&gt;&gt; Is there anything to configured on the F5 that will allow traffic to route back from the app server to the 2nd vip or this is route setup on the app server? &nbsp;That should indeed be on the app server as well - the app servers need to know how to reach the db-VS - they don't need to know how to reach the actual DB servers.

alexbct · Answer

Hi Jacqueline, &nbsp;Yes, this won't be a problem with an LTM-only license. The F5 does not have to be directly connected to the database servers, but the F5 will need to be able to reach them. Also, the App servers do NOT need to be able to reach the database servers, they only need to be able to reach the F5. &nbsp;The best way to think of this, is by its connections. There are actually 4 connections involved; From Client to F5 (app-VS)From F5 to App serversFrom App server to F5 (db-VS) From F5 to DB servers &nbsp;So although the App server needs the database server to complete requests from the client, each connection is very much on its own and as long as each connection can reach its endpoint, it will work. &nbsp;You can create the second (db) virtual server with the db-pool and possibly enable SNAT Automap if the db servers don't have the F5 as their gateway. After that, configure the db-VS IP address in the App servers as their endpoint for database connections. &nbsp;Hope this helps.

jacqueline_tadr · Answer

Thanks much Alex, 1, 2, and 4 are ok but 3 seems to be my problem. I'm assuming the 3rd step is to configure something o the app servers who are on the back-end of the F5. Is there anything to configured on the F5 that will allow traffic to route back from the app server to the 2nd vip or this is route setup on the app server? &nbsp;

jacqueline_tadr · Answer

Thank you Alex!

Forum Discussion

SSO Login Update Coming to DevCentral

Kevin - June 2026 Featured F5er

Tyler - May 2026 Featured Member

Recent Discussions

Related Content

Stop Wappalyzer from detecting my back end server technologies

F5 Container Ingress Services (CIS) and using k8s traffic policies to send traffic directly to pods

F5 Distributed Cloud - Traffic Steering based on Client IP Address

Decrypting TLS traffic on BIG-IP

Intent-Based Load Balancing for AI Traffic on BIG-IP

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS