Forum Discussion

Vidhya_147819's avatar
Vidhya_147819
Icon for Nimbostratus rankNimbostratus
Apr 11, 2014

ASM on vCMP

Hi All, Good day! I have a question on vCMP deployment with ASM and LTM. What is the best practice and hence the pros/cons of having ASM/LTM in the same vCMP? We are doing end to end SSL and hence having separate ASM and LTM will mean that we will have to have to encrypt decrypt at 2 different vCMPs? Any pointers/links appreciated. There was a thread earlier, but doesnt address the end to end SSL requirement.

 

Looking forward for your help! Cheers, Vidhya

 

1 Reply

  • TechNTactical_1's avatar
    TechNTactical_1
    Historic F5 Account

    All dependent on how much resources you have available to you? This is more of an architecture question. What platform are you running? ASM deployed standalone gives you a maximum of one pool member. ASM deployed in line with LTM will give you a scenario like below:

     

    1.) Client Connects to a Virtual Server lets say TEST_VS On LTM 2.) TEST_VS pool member is ASM (Probably a VS on ASM) 3.) ASM VS has pool members that are the back-end servers.

     

    You might have ASM + LTM in a VCMP instance which would give you something like:

     

    Load Balancing Multiple Pool Members DSC (HA) and Sync

     

    The number of times you have to encrypt and decrypt will decrease if you have ASM/LTM in the same VCMP instance. What do you see currently from a SSL TPS?