Forum Discussion
source_addr persistency on sequencial virtual servers
Hello Community ,
we have implemented the following traffic flow:
Client -> LB_VS_1 -> Pool_1 -> LB_VS_2 ->Pool_2
-Client IPs are using several /16 subnets
-LB_VS_1 is set with persistency profile Persist1 ( based on source_addr)
-Pool_1 has 5 pool members ( HTTP service)
-Pool_2 has 8 pool members (ICAP service)
The requirement is that HTTP requests from the same client IP should triger ICAP requests towards the same ICAP pool ( Pool_2) .
The Persist 1 profile will assure that the same client IP will always be handled by the same HTTP server ( Pool_1) . Now , we consider to setup src_addr persistency on LB_VS_2 .
Do you believe that this will that cover the requirement ?
Since LB_VS_2 will be triggered by 5 different IP addresses but we have 8 Pool_2 members availiable , does this mean that 3 Pool_2 members will not handle traffic?
And in genaral , persistency is applied only to the Pool_2 members that are active ? For example , in case a Pool_2 member comes offline , will its persitent sessions be deleted ?
Any different approach that can be suggested ?
Configuration abstract:
================
virtual LB_VS_1 {
pool Pool_1
destination 10.10.10.10:webcache
ip protocol tcp
persist Persist1
profiles fastL4 {}
vlans radio-external enable
}
pool Pool_1 {
lb method least conn
action on svcdown reset
slow ramp time 30
monitor all tcp
members {
192.168.122.101:http {}
192.168.122.102:http {}
192.168.122.103:http {}
192.168.122.104:http {}
192.168.122.105:http {}
}
}
virtual LB_VS_2 {
snat automap
pool Pool_2
destination 10.11.1.20:icap
ip protocol tcp
vlans www-internal enable
}
pool Pool_2 {
monitor all tcp
members {
10.11.1.51:icap {}
10.11.1.52:icap {
}
10.11.1.53:icap {
}
10.11.1.54:icap {
}
10.11.1.55:icap {
}
10.11.1.56:icap {
}
10.11.1.57:icap {
}
10.11.1.58:icap {
}
}
}
profile persist Persist1 {
defaults from source_addr
mode source addr
timeout 1260
map proxies enable
across virtuals enable
==========
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com