Azure and F5: BIG-IP High Availability using Azure LB

An overview of an F5 BIG-IP device cluster in Azure using high availability and an Azure load balancer for failover method. A BIG-IP cluster setup with HA via LB will sit behind an Azure LB that handles traffic distribution to the BIG-IP devices. This can result in auto scale designs as well as active/active design scenarios.

[jatnvirk]

Hi Jeff, Thank you for the detailed overview.

I have a query related to below design/traffic flow.

internet client>>>azure public load balancer>>> palo alto pair>>>internal load balancer >>>f5 pair >>>web servers

Do we have to create any VIP and pool on the f5 pair to accept health probes coming from internal load balancer.

[chipcook]

Jeff are these two F5s in any kind of Sync or failover group? Or are they two stand-alone devices.

[richarddanu]

That's odd... deploying MS LB for the F5 LB. Can't the F5 LB just do what the MS LB does?

[pawelipko]

Hi!
Building F5 cluster behind Azure LB makes the costs bigger.
Is it ok. for classic VIP approach in Azure like:
Azure FW, Public IP NATted to F5 VIP floating IP?
This way we'd have single LB cluster - which is cheaper and simpler...

[patonbike]

Me again! Is the reason for the AZLB in front of the HA pair because a traditional floating IP to transfer the traffic group won't work correctly in Azure?

[aminekadimi]

1. Why a secondary IP is needed on the external side?
2. If the template deploys a sync-fail cluster group, do you advise to go back to 2 standalone units and let ALB manage failover?

[pothh]

How can we configure multiple backend application/VIP with Same port