F5 Big-IP VE on azure

[GalalNabil]

I have a new implementation and I need to ask you something technical, I have a VM installed on azure with one interface (1 IP public and 1 IP private), im using an ADFS IApp template to replace the adfs proxy, and the virtual server has the private IP of the interface, now I want to add another web server to protect it. Should I add another private IP and assign it to a new virtual server and make it for the new web server ?

[KeesvandenBos · Accepted solution]

Hi,

There are several solutions, you could setup a vip-targetted-vip configuration with SNI routing.

https://devcentral.f5.com/s/articles/lightboard-lessons-vip-targeting-vip

https://devcentral.f5.com/s/articles/sni-routing-with-big-ip-31348

Or add a secondary ip address to the vm's nic and use that address for a second virtual server.

Cheers,

Kees

[GalalNabil]

thank you for your reply, just to be sure of what i will do, should i add another private ip and attach it to the vm ? both adfs and the new web server will have the same public ip, how can f5 differentiate between the traffic of both and forward it to the appropriate virtual server ?

[KeesvandenBos]

You are welcome.

Adding an extra private ip address is the most easy way to go forward.

You need to attach a public ip address to your extra private ip address.

Cheers,

Kees