Forum Discussion

paulpatriot_129's avatar
paulpatriot_129
Icon for Nimbostratus rankNimbostratus
Sep 12, 2017

What is the best practice offloading to HTTP servers

Our F5 sits in the DMZ and we currently offloading to HTTP servers in the DMZ. We are looking at the possibility of removing the HTTP servers and sending traffic from the DMZ F5's to our internal network servers in order to remove that extra hop. I'm wondering what the best practice is here? I know the HTTP servers are running Apache so they probably have some security already built in that maybe the F5's wouldn't provide? Thoughts???

 

LTM
security
  • Lee_Sutcliffe's avatar
    Lee_Sutcliffe
    Icon for Nacreous rankNacreous
    Sep 12, 2017

    I'm not 100% what you're asking here.

     

    Are you suggesting, replacing your web servers and hosting content on F5? If so, this is unorthodox and not recommended.

     

    F5 can host iFiles that can display content, useful for sorry pages etc but not hosting the primary web pages.