NimbostratusHi
I have an LTM policy that redirects traffic based on host name to multiple virtual servers.
On the main virtual server where the LTM policy is allowed, I have DoS protection and persistence configured. Now, when users are redirected to another virtual server, do I need to reconfigure DoS and persitance for each of the virtual servers? or it is enough to keep it on the main VS.
CirrostratusHello Moe,
If you have one generic DoS profile, you can leave it at the parent VS.
For persistence, I don't think it will work correctly if you put it on the parent.
You should put it on each child VS. Indeed, the load balancing decision is made by child VSs and the persistence is also determined based on pool members. For example, if you use "source addr" persistence the F5 will keep a table with following information: "source addr" => "node addr" It means that if you come with a specific "source_IP" trafic will be directed to the corresponding "node addr".
If you put the persistance on the parent VS that does not have any "default pool" it can't determine to which "node addr" it will send the data.
Regards,