Forum Discussion

goldberg_33306's avatar
goldberg_33306
Icon for Nimbostratus rankNimbostratus
Feb 12, 2014

Persistence Mirroring

Is persistence mirroring encrypted in a ha group? I know it use tcp 1028 and there are changes to this behavior in 11.4 but just wondering if its encrypted

 

application delivery
LTM
management

1 Reply

Sort By
  • Michael_Yates's avatar
    Michael_Yates
    Icon for Nimbostratus rankNimbostratus
    Feb 14, 2014

    I don't believe that the information is encrypted. In most situations F5 recommends that you use a direct cable connection between members of an HA Pair and have all of your mirroring occurring on that interface.

    Directly cable network mirroring interfaces

You can directly cable network mirroring interfaces on the BIG-IP systems in the failover pair, and F5 highly recommends that you do this when configuring a dedicated VLAN for mirroring. Configuring the pair in this way removes the need to allocate additional ports on surrounding switches, and removes the possibility of switch failure and switch-induced latency. Interfaces used for mirroring should be dedicated to the mirroring VLAN. Tagged interfaces shared with other VLANs could become saturated by traffic on other VLANs.

    You can see the entire article here: SOL13478: Overview of connection and persistence mirroring (11.x)