For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mike_Sullivan_2's avatar
Mike_Sullivan_2
Icon for Nimbostratus rankNimbostratus
Feb 11, 2008

VIP Bounceback or?

Howdy,     I have a LTM (9.1.2 40.6). My app servers connect to the db server vs (defined on the external vlan, but the pools and members all reside on the internal vlan) and this works as the ...
config
design
dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
Feb 15, 2008
Are the app servers also on the internal VLAN? Is the LTM the GW for the db servers? If that's the case it really shouldn't matter what VLAN the db vip is on, as long as the SNAT is enabled. Putting it on the internal VLAN will remove a hop, so that's good, but I must be missing something in the picture because the first config should work as well. It all boils down to making sure there's no asymmetric routing.

 

 

So the packet flow should be: 1. client -> vip, 2. vip -> db server, 3. db server -> whatever client address is given to it by LTM (so if SNAT it should be an address on the LTM), 4. vip -> client.

 

 

Hope that helps,

 

Denny