For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Oseias_68756's avatar
Oseias_68756
Icon for Nimbostratus rankNimbostratus
Mar 11, 2010

Which of these two designs is better? why?

Design 1:     INTERNET -> ROUTER -> FIREWALL -> F5-LTM -> SERVERS     With router to Firewall using private addresses   Firewall to F5 using PUBLIC addresses   F5 to Se...
config
design
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Mar 12, 2010
The big question is are you restricted on IP addresses? I've been fortunate enough to have worked at organisations that have had a whole class B for DMZ's and another class B for their data centres (All valid routable). It really does make things a breeze as far as debugging traffic problems...

 

 

My 2p is do whatever you can to have the LEAST NAT'ing in it that you can get away with, and NAT as late as possible...

 

 

H
Related Content