F5 cluster in Azure - why ALB is suggested in fornt?

Question

Hi!Recently we are building F5 cluster in Azure. Regular stuff, with VIPs and RServers behind the F5, maybe SSL termination.Initially we wanted to build it in classic way. Public IP in front + DNS entry (no need for DNS LB), next NAT it to F5 Outside/DMZ IP - nothing fancy.Yet vids I see in Internet suggst to use Azure LB in front of F5 LB and directing traffic from Azure LB to F5 self IPs, not floating IPsCould you tell me what is the reason? Azure has some issues with floating IP?

nikoolayy1 · Answer

Maybe if some autoscaling is configured so if more F5 BIG-IP VMs are auto created the Azure ALB (Azure Gateway) will auto send traffic to them. Also the Azure ALB also auto scales so it can provide some basic protections from basic DDOS attacks. As I work more with AWS the AWS ALB provided protections from SSL renegociation, TCP SYNC attacks and slowloris.
&nbsp;
&nbsp;

joshbecigneul · Answer

If you haven't seen this guide I suggest giving it a read, it has some valuable information on the different deployment scenarios available.
https://community.f5.com/t5/technical-articles/lightboard-lessons-big-ip-deployments-in-azure-cloud/ta-p/284445&nbsp;