Forum Discussion

TJ_Vreugdenhil's avatar
TJ_Vreugdenhil
Icon for Cirrus rankCirrus
Apr 24, 2020

F5 AWS HA

Hello -

 

We setup F5 HA (LTM & ASM ) in the same AZ in AWS. v14.1

 

We are using the m5.xlarge instances. We have eth0 - MGMT - eth1 - External - eth2 - Internal.

And we setup HA to communicate over internal.

 

Do we still use F5 floating IP addresses for F5 HA AWS?

 

And it appears you need to add all the VIP address to the F5 AWS ENI interface (eth1) as secondary addresses. So we did that on F51, but AWS does not allow you to use the same secondary IP (VIP) on F52. Do you know the solution for this? We have about 13 VIP's on this non-prod setup.

 

Thanks!

 

AWS
BIG-IP
cloud

2 Replies

Sort By
  • Simon_Blakely's avatar
    Simon_Blakely
    Icon for Employee rankEmployee
    Apr 24, 2020

    HA in AWS does not work in the same way as it does with VE or physical devices.

     

    AWS effectively does not have a Layer-2 network, so the HA based on ARP used on layer-2 networks does not work.

     

    In AWS (and other cloud networks) a failover script uses the cloud provider api to shift the IPs from one device to another. However, this can be slow (up to five minutes for IP address failover). Another option is having multiple Active BigIPs with an AWS elastic load-balancer distributing connections.

     

    Take a look at the F5 CloudFormation templates that guide you through building BigIPs in AWS with a templated configuration.