Load balanced servers and non-load balanced servers on same vlam

[mchockalingam]

Hi All,

I have some servers that needs load balancing and some that does not need load balancing on the same vlan.

Is it ok to have some servers with def. gateway as the CSS and some not? Do I have to use source group NAT in order for the servers to communicate with each other?

Also, is it better to use the CSS as the def. gateway for all servers in that vlan and bypass the content rules for the non-load balanced servers.

I am little confused about deciding which one is better. Any help would be appreciated.

[Gilles Dufour]

All you have to be carefull of is to avoid asymetric routing as the CSS wants to see both side of a connection.

So, if your server vlan is reachable via the CSS, the CSS should be the default gateway for all servers.

If another device is the primary route to your vlan, then this router should be the default gateway and the CSS should use source group to nat the traffic.

The best solution would be to move your servers to a different vlan.

Gilles.

[mchockalingam]

Gilles,

The server vlan has a router as the default gateway. Now I have added a CSS and modified the default gateway only for the servers that needs load balancing. This is just a temporary setup and would like to change all the server's def. gateway to be the CSS.

If I change the default gateway for all the servers in that vlan to be the CSS, is there anything special I need to do to bypass the content rules? If no service is defined for a particular server, it automatically bypasses, correct?

[Gilles Dufour · Accepted solution]

the bypass is based on destination.

If your servers try to reach an virtual ip, the CSS will apply the configured rule.

If the destination is not an ip on the CSS, the CSS will route it by default.

Again, you have to be careful about both side of the connections.

If the traffic from server to client goes through the CSS, you have to be sure that client to server traffic will also go through the CSS.

Gilles.

[mchockalingam]

Gilles,

Given the location of the CSS on the network and to avoid asymmetric routing, I decided to move the servers that does not need load balancing to a different vlan.

Thanks for you rhelp.