A simple scenario where CSS has two servers

[ssh]

Hi Folks,

I think I know the asnwer but I'll like to take your opinion here. In this simple scenario, say I have 2 CSSs, CSS1 and CSS2.

CSS1 is in Site A and CSS2 is in Site B.

CSS1 has a content rule in which there are 2 services. Service A is a server in the local CSS1 backend subnet and service B is a primary sorry server which is actually behind CSS2 in remote geographical site.

Is it possible for CSS1 to use server behind CSS2 as its primary sorry server and plus how client side routing will be handled in this scenario.

Thanks for reading and thanks in advance for your answers/thoughts,

Shahid

[Gilles Dufour]

First, I would say the sorryserver should be the CSS2 vip and not a server behind it.

This is a feasible solution.

The only important point is that CSS1 needs to see the response from the server, so you need to nat traffic on CSS1 with an ip address part of CSS1 subnet so that the server behind CSS2 can send the response to CSS1 and not directly to the client.

You can do this with a group.

ie:

group natme

vip x.x.x.x

add destination service sorryserver1

active

Regards,

Gilles.