Forum Discussion

Andrius_193034's avatar
Andrius_193034
Icon for Nimbostratus rankNimbostratus
Mar 19, 2015

Setting BIG-IP LTM Virtual Server for two SQL Servers nodes

I've created BIG-IP Virtual Edition instance in Amazon EC2 using this tutorial.

I've followed this tutorial to configure BIG-IP System as an MS SQL Database Proxy. There were couple things that I didn't get in "Creating a database proxy virtual server" section:

  • For the Destination setting, in the Address field, type the IP address you want to use for the virtual server. The IP address you type must be available and not in the loopback network.
  • In the Service Port field, type 1443.

Which IP address should I use in destination field? Public IP, which I use to connect to BIG-IP WEB UI?

Why it says set service port to 1443, not 1433, which is default to SQL Server?

For now I set public IP and 1443 port and tried to verify connection using UDL file

I have two DB nodes and when trying to verify connection directly to their IP addresses - connection succeeds. But when I try BIG-IP public IP - connection fails with the following error message:

Test connection failed because of an error in initializing provider. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied.

Both nodes are enabled and available in LTM (Local Traffic Manager).

Any ideas what I'm doing wrong?

application delivery
AWS
BIG-IP Access Policy Manager (APM)
cloud
deployment
LTM
security
  • Daniel_Epperson's avatar
    Daniel_Epperson
    Icon for Employee rankEmployee
    Mar 19, 2015

    The IP in the Virtual Server destination field will be a private address from AWS on the "external" interface. You'll then assign an Elastic IP to that address if you need public access to the Virtual Server. The port you pick on the service port isn't important as long as the UDL file is configured to match. The UDL will need to specify the Elastic IP instead of the private address if you are connecting over the internet to the virtual server.

     

  • Daniel_Epperson's avatar
    Daniel_Epperson
    Icon for Employee rankEmployee
    Apr 15, 2015

    I was able to view your qkview. Your node addresses appear to be public IPs. Depending on where your nodes live, maybe this should be the private addresses.

     

    Notice that all of the BIG-IP configuration level addresses are private. There are no default routes configured on your BIG-IP, thus causing the 'no route to host' errors. You either need to use link-local pool member addresses (private) or provide a gateway to route traffic to the public addresses.

     

    Do your pool members live in the same VPC as the BIGIP?