08-04-2011 08:28 AM - edited 03-01-2019 06:58 AM
Hi all,
I've read lots of Cisco docs/white papers on DCI - Layer 2 extension between DCs, but as yet I cannot find any decent information on how best to deploy firewalls and load balancers in such a design. I've seen refs to FHRP isolation on Nexus 7k (and possible 6k if you use DCI block) but nothing on the services elements.
The services element seems to be a complete minefield here:
- active/standby across sites, or deploy resilient pairs in each site?
- how to align optimal traffic flows inbound and ooutbound (RHI, SNAT, etc.)
- best practice suggestions ideally.
Cisco DCI docs seem to always gloss over the fact that most customers would have to deal with firewalls and load balancers here, and simply refer to 'coming soon' for that info.
If anyone has any good suggestions/links to docs explaining detailed implementation info would be much appreciate
Thanks
Phil
08-04-2011 08:32 AM
Phil-
By no means am I an expert here, but I believe that a Global Site Selector is what Cisco wants you to use. If you make both DC's active then you can leverage all resources and control who goes where with the GSS. Hope that little bit of info helps.
09-17-2014 10:41 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
You might want to check out this new product called ITD.
Simple and faster solution:
ITD provides :
Blog
At a glance
ITD config guide
Email Query or feedback:ask-itd@external.cisco.com