Forum Discussion
D_VCUHS_116063
Nimbostratus
NimbostratusVIP to VIP communications on the same BigIP LTM
Is it possible to have two members of a pool, communicate with members of a different pool using their VIPs? Both pools are configured on the same BigIP LTM, doing an Air Watch implementation which h...
Yes, it is possible.
D_VCUHS_116063Nimbostratus
NimbostratusPool1(DS1 & DS2)---> VIP(DS) 443 pass through
Pool2(SG1 & SG2)---> VIP(SG) 443 pass through
Nodes DS1,DS2,SG1 & SG2 are all in the same vlan/IP subnet. VIP(DS)&(SG) are in the same IP subnet. There is a static route pointing to IP segment of the nodes. There is also a static route sending all other IP addresses destinations to an external firewall.
I have a request for:
Pool1 to communicate with Pool2 VIP(DS)443 -----> VIP(SG)
Pool2 to communicate with Pool1 VIP(SG)443 -----> VIP(DS)
dragonflymr
Cirrostratus
CirrostratusI am probably missing something here. Pool can't communicate with anything as pool is not IP object, it's just container for pool memebers which in turn has IP:port assigned. Still pool member is not something existing as an server on LTM it's just object allowing to direct traffic to some backend server outside LTM.
So if:
Pool members (DS1 & DS2) as defined on LTM are pointing to the same VIP of VS that a bit do not make sense, two pool members pointing to one IP:Port are not something that will LB any traffic as well as not possible to be configured as separate entities, there is no way to create two separate pool members with same IP:port. You can of course use given pool member in different pools but those will be instances of the same service (IP:port)
by pool members (DS1 & DS2) you mean actual servers to which LTM is LB traffic and you need those servers to access another VIP (means another VS) on LTM that should be completely doable, you just need to enable those VS (that should be accessible to servers) on the VLAN where servers are connected (by default VS is enabled on all VLANs defined on LTM, so it should not be issue).
In this case you will have flow looking something like that:
Client traffic -> VIP (VS with pool containing DS1&DS2) -> DS1 server or DS2 server (based on LB decision inside pool) -> VIP (SG) -> SG1 or SG2 server (based on LB decision inside pool)
Piotr