source groups on css

[STEVE FLIS]

Is it possible to load balance on non directly attached servers using source groups.

I have an application that needs port 80 balanced to servers behind the css. The same app needs ports 7003 and 7004 balanced on the same vip to app servers many hops below the css.

Thanks

[jfoerster]

Hi Steve,

this is possibile. The only thing which has to be ensured is that the CSS knows where the servers are (routing has to be adjusted) and that the return flow comes back to the CSS. If you do source groups the last thing should be ensured.

Kind regards,

Joerg

[STEVE FLIS]

my config is a css interface on a network facing the internet (external vips) one interface facing internal users (internal vips) and one interface to backend servers.

routing sends internal ips to and back the internal vips interface and 0.0.0.0 is out to the internet

what would a config look like?

define services of servers a few hops away with keepalive ping?

create 2 source groups with the same ip of the interal vip and a group with the outside vip? add destination servers of the hops away servers to the group?

Create content rules that points ports 7003 and 7004 to the services of the servers several hops away?

Thanks

Steve

[jofi]

Hi Steve,

You can do it with 1 source group.

For example, if you have 3 remote services, Serv1, Serv2 and Serv 3,

group REMOTE_SERVICES

add destination service Serv1

add destination service Serv2

add destination service Serv3

vip address x.x.x.x

active

You can add them to any contentrule you want, apply any keepalive you want, the source-group is independant. If the css forwards traffic to one of these services it will always change the source-address of the traffic to x.x.x.x

Regards,

Joeri