For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Oseias_68756's avatar
Oseias_68756
Icon for Nimbostratus rankNimbostratus
Mar 11, 2010

Which of these two designs is better? why?

Design 1:     INTERNET -> ROUTER -> FIREWALL -> F5-LTM -> SERVERS     With router to Firewall using private addresses   Firewall to F5 using PUBLIC addresses   F5 to Se...
config
design
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Mar 11, 2010
Design two is normally avoided due to limited IP availability. If you control the routing table and the l3/l4 packet flow with firewall rules, I'm not sure it really matters what IP ranges you use inside your infrastructure. However, using private addresses internally gives you a little more flexibility in moving around the public addresses externally. My $.02.
Related Content