TJ_Vreugdenhil
Cirrus
CirrusF5 AWS HA
Hello - We setup F5 HA (LTM & ASM ) in the same AZ in AWS. v14.1 We are using the m5.xlarge instances. We have eth0 - MGMT - eth1 - External - eth2 - Internal. And we setup HA to communica...
Forum Discussion
Simon_Blakely
Employee
EmployeeHA in AWS does not work in the same way as it does with VE or physical devices.
AWS effectively does not have a Layer-2 network, so the HA based on ARP used on layer-2 networks does not work.
In AWS (and other cloud networks) a failover script uses the cloud provider api to shift the IPs from one device to another. However, this can be slow (up to five minutes for IP address failover). Another option is having multiple Active BigIPs with an AWS elastic load-balancer distributing connections.
Take a look at the F5 CloudFormation templates that guide you through building BigIPs in AWS with a templated configuration.
TJ_VreugdenhilThanks Simon! We are using the CFT below.
Couple questions:
1) Is it ok to use the internal NIC for HA/Config Sync as well to save on cost (instead of having a dedicated HA subnet/interface)?
2) What the best way at the moment to get around the 15 VIP ENI allocation per NIC using a deployed template like this?
Thanks!