Just to avoid confusion, let me explain what implementation we want. One of our clients wants to deploy a VRRP-A: ACTIVE ACTIVE setup, they believed that if two devices are both active there lot more session can be process. We not meant literally both devices are active, we all know originally that VRRP-A is ACTIVE and STANBY.
We have a thought that it can be achieve by defining two vrid with floating ip on each devices and pointing specific network traffic to it. On the firewall side we will use a PBR to route traffic on specific floating IP.
Please see attached image to see the setup we want to achieve.
Pls. advise also if this setup is possible on NHLD deployment
Sorry for the late response and thank you for the detailed information to your requirements. The A10 can do NHLD based on destination IP and just by looking at your diagram I think we can deploy an Active-Active NHLB solution with the following requirements. You need to configuration A10-1 to be active of vrid1 and A10-2 to be active of vrid2 but you would need to define two floating IPs; One for vrid1 the other for vrid2. In your specific topology, we would need the firewall to do PBR which points traffic to corresponding floating IP address.
Comments
NHLB will NOT support VRRP-A Active-Active topology. Sorry for the bad news.
Genard
Just to avoid confusion, let me explain what implementation we want.
One of our clients wants to deploy a VRRP-A: ACTIVE ACTIVE setup, they believed that if two devices are both active there lot more session can be process. We not meant literally both devices are active, we all know originally that VRRP-A is ACTIVE and STANBY.
We have a thought that it can be achieve by defining two vrid with floating ip on each devices and pointing specific network traffic to it. On the firewall side we will use a PBR to route traffic on specific floating IP.
Please see attached image to see the setup we want to achieve.
Pls. advise also if this setup is possible on NHLD deployment
Hope you respond to us immediately .
Thanks
evea
Can someone please give a comment on this one.
Thanks
Genard