Re: F5 configuration help is needed
Ali Abbas <[email protected]> Mon, 21 Sep 2009 18:52:05 +0200
| Newsgroups | gmane.comp.programming.load-balancing.general |
|---|---|
| Message-ID | <[email protected]> |
Hi, On Mon, Sep 21, 2009 at 6:28 PM, Rosenberry, Eric <[email protected]> wrote: > We actually have our F5 deployed in this manner, but one major issue for us is that without SNAT turned on, if you have one server on the subnet that needs to access another service through the F5 (that gets directed to other servers on the same subnet) then the packets end up flowing in a triangle and it does not work. Layer 2 ARP... TCP segments are out of state and the receiving server drops them... totally normal. You have no other alternative than sourcing the VIP of the F5 (SNAT), so the packets are not longer out of state when reaching one of the endpoints. B.R -- Ali Abbas Blog: http://alouche.net NumExt: https://addons.mozilla.org/en-US/firefox/addon/9528 This email contains confidential information. If you have received this email in error, please delete it immediately, and inform us of the mistake by return email. Any form of reproduction, or further dissemination of this email is strictly prohibited. _______________________________________________ lb-l mailing list [email protected] http://vegan.net/mailman/listinfo/lb-l Searchable Archive: http://vegan.net/lb/archive http://lbdigest.com Load Balancing Digest http://lbwiki.com Load Balancing Wiki