Forum Discussion

shadow82's avatar
shadow82
Icon for Cirrus rankCirrus
Aug 22, 2023
Solved

LTM Policy based External VServer. New need: use it also as proxy for PostgreSQL DB

Hi! I got some new challenge for my F5. I have F5 Act/Stb cluster running in Azure, 16.1.3 Big-IP software version. F5 has been divided into 1 external VServer that has LTM policies defined. Base...
application delivery
PostgreSQL Vserver LTM Policy
  • AubreyKingF5's avatar
    AubreyKingF5
    Aug 24, 2023

    I get that for http protocols, but you cannot read an http header on a PostgreSQL connection. Is there an option for NO HTTP host? If so, try that.. although, you'll forward every garbage packet, too.

    I understand adherance to design, as well, but maybe that's the design for http. You can resolve your issue right now by creating a new "external VS" that listens on the appropriate port and selects the primary DB box. If you're concerned about things like persistence, maybe enable universal persistence, if needed.

AubreyKingF5's avatar
AubreyKingF5
Icon for Admin rankAdmin
Aug 22, 2023

Why not make a 5432 virtual? Same IP address.. different port. New VS with no http resources eaten up.

  • shadow82's avatar
    shadow82
    Icon for Cirrus rankCirrus
    Aug 23, 2023

    Doable, but breaks the scheme.
    Currently we have there 1 External VServer and 41 Internal VServers.

    External VServer gets the request, checks HTTP Host URL and redirects traffic to Internal VServer X
    (small example below):

    I'd like to keep this way without making exceptions if possible. I need to have it scalable

    I don't know if next week there could be another - new - PostreSQL DB proxy necessary

    • AubreyKingF5's avatar
      AubreyKingF5
      Icon for Admin rankAdmin
      Aug 24, 2023

      I get that for http protocols, but you cannot read an http header on a PostgreSQL connection. Is there an option for NO HTTP host? If so, try that.. although, you'll forward every garbage packet, too.

      I understand adherance to design, as well, but maybe that's the design for http. You can resolve your issue right now by creating a new "external VS" that listens on the appropriate port and selects the primary DB box. If you're concerned about things like persistence, maybe enable universal persistence, if needed.

      • shadow82's avatar
        shadow82
        Icon for Cirrus rankCirrus
        Aug 25, 2023

        Seems like: 

        Thanks for you help on this one 🙂