Forum Discussion

tomimma_93344's avatar
tomimma_93344
Icon for Nimbostratus rankNimbostratus
Sep 24, 2012

LTM with Exchange 2010 design

Hi All,

 

I am recently requested to design Exchange 2010 design & its placement in a datacenter for a customer. F5 has been provided great resources for us to integrate with Exchange 2010.

 

Yet, I have a very basic question and need your advice what is the most common placement of DC server (active directory). (Not talking about Exchange Servers.)

 

To make simple, let's assume there are two Exchange 2010 servers, and each server has HUB, CAS, MailBox rules in one box. Also DAG is configured, so that LTM is necessary to load balance traffic to CAS array.

 

Also, I am planing to use "Traditional" F5 design wihch uses an external and internal network. (not "One Armed"), so Exchange servers sit in an internal network of LTM.

 

Now question is "Where should I place AD server?" Should I place it behind LTM like Exchange 2010 servers which is the internal network of LTM, or Should I place it in the same network of external network of LTM?

 

I have been though a lot of doc, but all of them talk about how incoming CAS array traffics are load-balanced. But now basic design or placement of AD servers.

 

 

Thanks in advace.

 

config
design

2 Replies

Sort By
  • El_Jefe's avatar
    El_Jefe
    Icon for Nimbostratus rankNimbostratus
    Sep 24, 2012
    I would place it in the same subnet as the Exchange / CAS boxes. Even if you are doing APM for remote access, (which you aren't), it makes more sense. Any particular reason for a two arm config other than not liking SNAT?
  • tomimma_93344's avatar
    tomimma_93344
    Icon for Nimbostratus rankNimbostratus
    Sep 25, 2012
    Hi El,

     

     

    Thanks for your comment. Not particular reason. But, a two arm design is more typical and I can see more docs in "AskF5" site that explain this kind of design. Besides, with one arm design, you do not see actual client connections since SNAT translates all source IP addresses to SNAT IP. To check connection status with Bigpipe command, I prefer to use two arms.

     

    However, it makes absolutely sense to use "one arm" when you deploy Exchange 2010 with AD in the same site.

     

     

    Thanks again!