Implementing SSL Orchestrator - Network Insertion Use Cases

General Topology Considerations SSL Orchestrator is deployed as an inline device on the network and supports both single devices and HA clusters using device groups. Deployment topology can be ...
Published Jan 22, 2020
Version 1.0
BIG-IP
deployment
network insertion
security
series-big-ip-ssl-orchestrator
SSL Orchestrator
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Jan 28, 2020

Hi,

Just to be sure for Layer 2, Inbound Transparent Proxy diagram. Is that just simplification in diagram or I don't get something here :-( SSL is between Egress and Internal routers. From the schema:

  1. Egress router IP: 10.3.0.254
  2. Internal route IP: 10.2.0.254

Assuming that subnets this IP are from are not using /8 mask then both IPs are from different subnets - if so I don't get how traffic can flow between routers?

Or maybe IP specified for Egress router is on external side (User facing) but on internal side (facing SSLO or rather Internal Router) it is using IP from 10.2.0.0/24 subnet?

As far as I understand vWire and VLAN group those can only connect VLANs with the same subnet, so host in VLAN on one side of SSLO has to use the same subnet as host on other side of the SSLO - or in other words it handles just single L2 broadcast domain - Am I wrong?

Piotr