For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nekau_65641's avatar
nekau_65641
Icon for Nimbostratus rankNimbostratus
Apr 07, 2008

Using same LB for servers on multiple subnets

We are soon putting our newly purchased BIG-IP 3400's into production is a redundant configuration.     I have used Cisco LB's before, and the inside interface where the servers are only suppor...
config
design
Jacob_Harres's avatar
Jacob_Harres
Icon for Nimbostratus rankNimbostratus
Apr 11, 2008
We have a secure, firewalled hosting environment as well. I am using our BigIPs to do LB on several different applications in several DMZs. What I've done is isolate our BigIPs in their own DMZ and route to the subnets where our load balanced servers sit. I've had no problems with this setup either in terms of security or reliability. It also has the added bonus of making the BigIPs incredibly scalable.

 

 

The one thing to keep in mind that is different than the Cisco load balancer in that you don't have the distinction of an outside and inside interface. You can have a single interface as the connection point and then just create vlans on the BigIP for your virtual servers. As long as routing is in place, all monitoring, proxying and load balancing can be done via a single interface.

 

 

Let me know if you want more specific info on our setup and I will give you some tips, pointers and what not.

 

 

Regards,

 

Jacob