NimbostratusIn our setup request for website sites first goes to the DNS server which is having a NS as GTM and then request hits at GTM and gets the IP of LTM which is avilable across the data center .
In this scenario who we can use web application firewall (WAF) in proxy mode .
Hi Govind - if I understand you correctly, you're asking how you could place Silverline WAF in front of your application that resides behind a LTM that is in your data center?
If so, you could utilize Silverline WAF in the following:
So it would follow this sort of approach:
External Address of your application that you could go to directly: 100.100.100.100 Front-End IP from Silverline: 200.200.200.200 How'd you configure GTM: Use 200.200.200.200
Traffic Flow:
Let me know if that was what you were after or not.
Thanks!
Luke
NimbostratusThanks Mr Luke Lehman for your response . I will just explain my setup . We have Two DC and each DC hosting pair of LTM & Standalone GTM .
When User Request say it hits DNS ( Which is Hosted Somewhere in Cloud say GO Daddy ) which then delegates the NS service to GTM by using the subdomain .Once request reaches the GTM it searches for Available LTM VIP .
We are using SNI for the VIP .
NimbostratusThanks for your Answer .
Current traffic flow : DNS Request for
DNS Response from Public DNS to delegate the request GTM ( NS )
GTM Selects the available LTM IP and send the request back to User
User sends request to LTM directly and then normal LTM flow starts .
What approach we need to put if we are integrated with Silverline . If we can directly configure LTM IP in silver line then we no more require GTM . Kindly confirm as we are delegating DNS query to GTM at the moment.
Can you share the call flow that will be very valuable
Integrating Silverline in front of your data centers does provide the ability to check which DCs are available and load balance the traffic as necessary. I don't want to undervalue GTM though as it still has a ton of value-add.
One thing that you could do is leverage GTMs Topology capabilities, to do some testing. For example, when you were trying out Silverline, you could create the necessary topology config to reply to only your machine's DNS queries to the Silverline Proxy IP (which would then LB to one of your 2 DCs).
NimbostratusThanks a lot for your clarification . In this scenario i need to remove the GTM from the picture as you said silverline can check which DCs are available and load balance the traffic as necessary.
