Monday, February 13, 2017

Basic F5 LTM HTTP Load Balance Configuration (With Firewall)

Netsec February 13, 2017 F5

The BIG-IP® local traffic management system is specifically designed to manage your local network traffic. Local traffic management refers to the process of managing network traffic that comes into or goes out of a local area network (LAN), including an intranet.

A commonly-used feature of the BIG-IP system is its ability to intercept and redirect incoming network traffic, for the purpose of intelligently tuning the load on network servers. However, tuning server load is not the only type of local traffic management. The BIG-IP system includes a variety of features that perform functions such as inspecting and transforming header and content data, managing SSL certificate-based authentication, and compressing HTTP responses. In so doing, the BIG-IP system not only directs traffic to the appropriate server resource, but also enhances network security and frees up server resources by performing tasks that web servers typically perform.

1. Topology
Internet -- Firewall -- F5 External Network(10.94.112.0) -- F5 Cluster -- F5 Internal Network(10.94.100.0)

2. Create Nodes

Before created nodes health monitor, both nodes show disconnected.

3. Create Nodes Health Monitor

Once Health Monitor created, both nodes will show green in the list.

4. Create Pool

Both two nodes 10.94.100.121 and 10.94.100.122 will be added into this pool.

5. Create Virtual Server

Source Address Translation has been configured use Auto Map. The SNAT automap feature automatically selects one of the systems self IP addresses (typically a floating self IP address of the egress VLAN), and maps it to the original IP address or addresses that you specify during SNAT creation. When you use this feature, you do not need to explicitly specify a translation address.