Forum Discussion

Brandon's avatar
Brandon
Icon for Cirrostratus rankCirrostratus
Jul 29, 2014

LTM Question

I received a request to have 2 VIP addresses (2 virtual servers) that will have the same pool, the pool will have 2 members. The part I am unsure of is that the pool will need to really use one pool member at a time.

 

VS of 192.168.15.10 and 192.168.15.11 listening on 80 or 443 not sure yet.

 

pool 192.168.11.5 port 443 or 80 192.168.11.6 port 443 or 80

 

We will only want traffic to be sent to 192.168.11.5 however 192.168.11.6 the server will be up, waiting in standby. I guess my question is will f5 need to mark 192.168.11.6 down not to load balance to it because it is in the same pool, and then come up if 192.168.11.5 goes down? I am thinking maybe a specific monitor on 192.168.11.6 that would bring 192.168.11.6 up and make sure 192.168.11.5 is down.

 

application delivery
design
LTM

2 Replies

Sort By
  • Ryannnnnnnnn's avatar
    Ryannnnnnnnn
    Icon for Altocumulus rankAltocumulus
    Jul 29, 2014

    You should look into using priority groups within the pools.

     

    If you set Priority Group Activation to "Less than 1"; Give one of your servers a priority of (for example) 100 and the other a priority of 50.

     

  • OTS02's avatar
    OTS02
    Icon for Cirrus rankCirrus
    Jul 29, 2014

    The active/standby condition can be accomplished by enabling "Priority Group Activation" and selecting "less than... 1 Available Members" in the pool members pane properties. On pool member 192.168.11.5, assign a priority of 2. On 192.168.11.6, assign a priority of 1. As long as 192.168.11.5 is healthy, the LTM will only serve connections to it. If it gets marked down, the LTM will serve connections to 192.168.11.6 (assuming it is available).

     

    As for the https/http issue, you can have one VIP that terminates SSL, and another VIP that listens on port 80. They both can send to the same pool using port 80 (or whatever you want). It all depends on your particular use-case. For most of my websites that serve https, I have the 2 VIPs described above, but the port 80 VIP does nothing more than send a 301 redirect to https (via iRule).