Forum Discussion

starboy's avatar
starboy
Icon for Cirrus rankCirrus
May 23, 2022
Solved

F5 LTM Load Balancing from web to App servers

HI All I have F5 BIG-IP which load balances the trafic that destined to my web servers from external and my webservers internally communicate with the Application server and what i want is to load b...
application delivery
  • AlexBCT's avatar
    AlexBCT
    May 23, 2022

    Hi Starboy, 

    Basically, you need to think of this traffic as a completely new traffic stream, separate to the traffic from external to the webservers. In this new stream, the webservers will be the client, and the appservers will be the server/destination. 

    So, set up a new virtual server (ensure that only the web servers are allowed to connect to it, for security reasons. You can do this by locking it down to vlans/tunnels or by putting in the source addresses), then create a new pool for the appservers and connect the pool to the newly created virtual server. 

    As you mentioned that you don't have a physical connection with these app servers, you may need to enable SNAT (Automap probably easiest in your scenario) and ensure that the F5 can route to the appservers.

    Hope this helps. 

AlexBCT's avatar
AlexBCT
Icon for Cumulonimbus rankCumulonimbus
May 23, 2022

Hi Starboy, 

Basically, you need to think of this traffic as a completely new traffic stream, separate to the traffic from external to the webservers. In this new stream, the webservers will be the client, and the appservers will be the server/destination. 

So, set up a new virtual server (ensure that only the web servers are allowed to connect to it, for security reasons. You can do this by locking it down to vlans/tunnels or by putting in the source addresses), then create a new pool for the appservers and connect the pool to the newly created virtual server. 

As you mentioned that you don't have a physical connection with these app servers, you may need to enable SNAT (Automap probably easiest in your scenario) and ensure that the F5 can route to the appservers.

Hope this helps.