Forum Discussion

DanSheldon_2824's avatar
DanSheldon_2824
Icon for Nimbostratus rankNimbostratus
Sep 10, 2016

ASM impact on ltm

I am designing an F5 LTM LB/WAF solution for a new customer and need to know what impact adding ASM functionality has on the LTM/Big IP device to make sure I'm right-sizing the proposed solution for their needs. For reference the client's current F5 LTM 1600 is under no real stress - throughput peaked at 70Mbps but averages 40 - Peak traffic was 10,000 concurrent connections - Averages 60 new connections per second. I had thought that the 2000S would be overly sufficient for this client but the ASM piece has me hesitant.

 

Looking for any kind of "sizing rule of thumb" for adding ASM to an LTM or whether I'm way off. Thank you very much.

 

application delivery
ASM Advanced WAF
LTM
security

1 Reply

Sort By
  • Vijay_E's avatar
    Vijay_E
    Icon for Cirrus rankCirrus
    Sep 12, 2016

    With the newer SSL cipher suites, you are better off using the 2000s platform which can handle the newer ciphers better than the older platform like 1600. As a rule of thumb, based on experience, I would recommend planning for a 20-30% hit in resource utilization for the same amount of traffic in order to add a new ASM module to the existing LTM module. However, this is quite a generic recommendation and could vary depending on traffic characteristics.