Big-IP GTM Location

If talking about internet facing GTM, we try to install the GTM device outside the network (before firewall) as it can help you with :

• handling DDOS attack on DNS service with DNS express feature, in this case Firewall could be a bottleneck
• testing the whole chain to know if the app is available : fw - network - rp -app

Of course most of the time, this is not allowed and GTM is positionned in public DMZ as it will received internet requests.