Forum Discussion

imeliran's avatar
imeliran
Icon for Nimbostratus rankNimbostratus
Oct 30, 2017

load balancing and persistence method

Hey community, just wonder if there is solution for specific scenario, i need to find the most efficient method for load balancing and keep the persistence connection between 2 nodes and it will scale up to 8 at future. those nodes have same vlan stretch to F5 for "LAN" connectivity. also i implement VS and configure SSL certificate , http profile and persistence based cookies. but the traffic come from the internet to the VS passes through WAF that not under my control and that make 2 issues. 1) that hide the most client side IP addresses and the F5 able to see up to 2-4 source ip address at origin packet before the load balancing decision occur.

 

2) when i tried to test the persistence i figure it out that the client browser does not have the cookies allocated by F5 and that make sense because the connection between the client to the VS terminated by the WAF services, and it has to fallback to source IP address base persistence which is not efficient.

 

there is any config for keeping the WAF and still get proper load balancing and persistence?

 

Eliran

 

application delivery
LTM

1 Reply

Sort By
  • Jad_Tabbara__J1's avatar
    Jad_Tabbara__J1
    Icon for Cirrostratus rankCirrostratus
    Oct 30, 2017

    Hello, could you clarify more please ?

     

    From your description I understand the following :

     

    client --> WAF --> VS (F5) ---> Backend Server

     

    Could you tell us more about the WAF (an F5 ? or another editor ?), what kind of VS (F5) you configured (a standard VS ?), and which backend server is used...

     

    If the WAF is an F5, then you can insert the XFF (X-Forwarded-For) to know the client IP address and make persistance on the "source_ip" / also if your clients supports cookies, you can make "cookie" persistence...

     

    You have many options, but we need to have more info.

     

    For the LB method, you can use the "least connection member" if backends have same ressources (CPU RAM)

     

    Regards