F5 Load Balancing Configuration manual

Load balancers are often referred to as four-tier switches or seven-tier switches. The four-layer switch mainly analyzes the IP layer and the TCP/UDP layer to achieve four-layer flow load balancing. In addition to supporting four-tier load balancing, the seven-tier switch also contains information on the analysis application layer, such as HTTP protocol URI or cookie information.

First, F5 configuration steps:

1, F5 Network planning

(1) Group Network extension Park (specific to network equipment physical port allocation and connection, server network card allocation and connection)

(2) IP address allocation (specific to network device and server adapter IP address allocation)

(3) The determination of VIP, member pool, node, load Balancing algorithm and strategy keeping method on F5 business

2, F5 configuration before the preparation work

(1) Version check

f5-portal-1:~# B Version

Kernel:

Big-ip Kernel 4.5ptf-07 Build18

(2) Time check-if not correct, please change in single-user mode

f5-portal-1:~#　date
Thu　May　20　15:05:10　CST　2004

(3) Apply for license--site F5 all need to apply themselves to the F5 website license

3, the general configuration of F5

(1) In the case of security requirements, the Setup menu can be opened telnet and FTP functions, easy to maintain later

(2) Configure the VLAN UNIQUE_MAC option, which is to ensure that the MAC addresses of the different VLANs on the F5 are not the same. By default, the MAC addresses of F5 's individual VLANs are the same, and it is recommended that when configured, this is a unified selection. Use command Ifconfig–a to test

Specifically, system/advanced Properties/vlan Unique_mac

(3) Configure the Snat any_ip option option, which can be used to convert the ping data stream to ensure that the intranet machine is Snat. Ping is the third tier of data packets, by default F5 is not converted to ping packets, that is, the internal VLAN host could not ping the external VLAN machine. (Note: You can also use Telnet for validation.) ）

Specifically, system/advanced Properties/snat any_ip