F5 BigIp cluster active/stanby in Azure, failover very slow

HA works completely different in cloud environments due to abstraction of L2 networking. Instead, I would just run a few active BIG-IP instances and load balance via DNS. More specifically, I would use terraform or ansible or some other automation framework to auto-build my cloud BIG-IP instances based off some github managed master configuration. Then I would use cloud native automation tools to manage the DNS entries. Sadly, there is no way to minimize HA failover delay in the cloud.... you are trying to fit a square peg into a triangle hole. F5 HA was designed for connected and local traditional L2 network designs. You dont have that with cloud so trying to replicate similar functionality is really a hack. Go active w/ DNS based failover.

A BETTER way, would be to look into F5 Distributed Cloud for HTTP/S workloads.

Hi Alexandre_Demasi here are a couple resources to reference.

• https://community.f5.com/t5/technical-articles/lightboard-lessons-big-ip-deployments-in-azure-cloud/ta-p/284445
• https://community.f5.com/t5/technical-articles/create-a-big-ip-ha-pair-in-azure/ta-p/282837

The Azure API is much slower than AWS API for example and as F5 in the cloud uses CFE as when there is a failover the F5 needs to call the API to change the elastic IP address attachment as cloud environments do not support GARP this is where the issue with more than a minute failover is seen.

Use Azure ALB for failover for ASM and LTM deployments as this was used in the old F5 azure arm templates but now you can modify the autoscale group if needed:

f5-azure-arm-templates-v2/examples/autoscale/payg/README.md at main · F5Networks/f5-azure-arm-templates-v2 · GitHub

Lightboard Lessons: BIG-IP Deployments in Azure Cl... - DevCentral (f5.com)

f5-azure-arm-templates/supported/failover/same-net/via-lb/3nic/existing-stack/byol/README.md at main · F5Networks/f5-azure-arm-templates · GitHub

For APM VPN deployments I suggest use F5 GTM and standalone APM devices:

https://my.f5.com/manage/s/article/K70300789

Thank you for your answers.
I'll keep looking, starting with the links and ideas you mentioned.

Have a nice day.