F5 BIG IP clone pooling
Hello We want to deliver to analyzer machine the bi-directional traffic from BigIP F5 via clone pools. But I think it seems like to setup incorrectly because I can see the real client ip address is what reaches the virtual server for request and can not see F5 self ip for response I attacted pcap file Is not need to see F5 self-ip ? https://www.cloudshark.org/captures/88b59721b74f There are only 23 Previous Segments Missing from the tcpdump. There are some malformed https packets as well, but overall your incoming traffic looks acceptable. The moral of the story we want to replicate server-side traffic (after address translation) to the clone pool member. What should I do ? Thanks in advance Kind Regards,
Clone Pool vs Interface Mirroring
Hi Guys, I am studying for the 301a exam, and I got to a part of clone pools and interface mirroring. I am trying to understanding the actual difference and advantages on using any of this features. For what I read both features have the same purposes; however, Interface Mirroring has too many caveats and disadvantages as opposed of clone pools. I've found the following F5 SOL that explains both features, but I am still not 100% clear on those. Configuring the BIG-IP system to send traffic to an intrusion detection system (11.x) https://support.f5.com/kb/en-us/solutions/public/13000/300/sol13392.html Can you guys help me to clarify it? Thanks.
