The BIG-IP device service clustering (DSC) architecture, also known as high availability (HA), enables you to create a redundant system configuration for multiple BIG-IP devices on a network to prevent service interruptions when one device fails. To create redundancy, the system mirrors connection and persistence information to a peer device during failover. The BIG-IP system can mirror TCP, User Datagram Protocol (UDP), and SSL connections for virtual servers. This demonstration uses BIG-IP 15.0.1.
• 0:52 Mirroring connection information for a virtual server
• 1:35 Mirroring connection information for SNAT connections
Hello everyone, today AskF5 shows you how to mirror connection information for virtual servers and secure network address translation (SNAT) connections in a high availability (HA) device group. High availability configurations prevent service disruptions. They are comprised of multiple BIG-IP devices on a network, which use the same system configuration. One part of the configuration is connection information. When the active unit fails over, the system uses a channel to mirror connection information from the active device to the next active peer. The BIG-IP system can mirror TCP, User Datagram Protocol, or UDP, and SSL connections for virtual servers and SNATs. Note that when your big IP system mirrors a high volume of connection information, F5 recommends you dedicate a VLAN and interfaces to processing mirroring traffic. This demonstration uses BIG-IP 15.0.1 and the Configuration utility to mirror connection information, but you can also use the TMOS shell. To mirror connection information for virtual servers, you enable the Connection Mirroring setting on each virtual server. To do so, after you log in to the Configuration utility, go to Local Traffic, Virtual Servers, Virtual Server List. Click the virtual server you want to enable connection mirroring on. In the Configuration list, select Advanced, select the Connection Mirroring checkbox, and then select Update. To mirror connection information for SNATs, you enable the Stateful Failover Mirror setting on each SNAT. To do so, after you log in to the Configuration utility, go to Local Traffic, Address Translation, SNAT List. Click the SNAT you want to enable connection mirroring on. Select the Stateful Failover Mirror check box, and then click Update. You can use TMOS shell commands to view connection information that you mirrored to a BIG-IP device group member. To do so, use the show /sys connection type mirror command. For additional details, use the all- properties version of the same command. That's it! If you have installation, maintenance, troubleshooting, or general questions about F5 products and solutions, leave us a comment or send us an email.
0 Comments