Each Inward VLAN must be connected to the same Layer 2 virtual network from every device in the
Sync-Failover Device Group, and each Outward VLAN likewise, but to a distinct Layer 2 virtual
network.
If you choose to use the
Ratio
field, the BIG-IP system distributes connections among pool members
in a static rotation according to ratio weights that you define. In this case, the number of connections
that each system receives over time is proportionate to the ratio weight you defined for each pool
member or node. This number must be between 1-100.
For example, if you have five devices and you assign a ratio of
1
to the first three devices, and a ratio
of
2
to the fourth device, and a ratio of
3
to the fifth device; the first three devices with a ratio of 1
each receive 1/8 of the traffic. The fourth device receives 1/4 of the traffic, and the fifth device
receives 3/8 of the traffic.
7.
Under Available Devices, from the
IP Address
list, select the IP address pairs of the Layer 3 devices
and click
Add
to add them to the
IP Address
field.
8.
From the
Translate Port for HTTP Traffic
list, select one of the options.
• Use
No
if the connections should use their original destination ports.
• Use
Yes to Port 80
to send all HTTP traffic through port 80.
• Use
Yes to Port 8080
to send all HTTP traffic through port 8080.
• Use
Yes to Port 8443
to send all HTTP traffic through port 8443.
9.
From the
Connection Handling On Outage
list, select one of the following:
• Use
Skip Service
to allow connections to skip the service you are configuring if all the devices in
the service are unavailable.
• Use
Reject Connection
for the system to reject every connection reaching the service when the
service is down.
10.
Click
Finished
.
11.
Click
Save
.
Note:
Layer 3 devices need to follow a specific fixed addressing scheme. For each of the 10 possible Layer
3 inline services, you need to use the following configuration (with
x
being 0-9 representing the inline
service):
Inward Interface:
• IPv4 Address:
198.19.x.61
through
68
(for each of the load balanced Layer 3 devices)
• IPv4 Netmask:
255.255.255.128
• IPv6 Address:
fd06:4d61:x::41
through
48
(for each of the load balanced Layer 3 devices)
• IPv6 Netmask:
ffff.ffff. ffff.ffff. ffff.ffff. ffff.ff00
Outward Interface:
• IPv4 Address:
198.19.x.161
through
168
(for each of the load balanced Layer 3 devices)
• IPv4 Netmask:
255.255.255.128
• IPv6 Address:
fd06:4d61:x::141
through
148
(for each of the load balanced Layer 3 devices)
• IPv6 Netmask:
ffff.ffff. ffff.ffff. ffff.ffff. ffff.ff00
Routes:
• Default Gateway:
198.19.x.245
• Gateway to internal networks:
.1
While the base address can be changed if needed, F5 recommends leaving it set to the default:
198.19.0.0
.
You have now configured an inline service for Herculon SSL Orchestrator.
Creating Services, Service Chains, and Classifier Rules
28
Summary of Contents for Herculon SSL Orchestrator
Page 1: ...F5 Herculon SSL Orchestrator Setup Version 13 1 3 0 ...
Page 2: ......
Page 6: ...What is F5 Herculon SSL Orchestrator 6 ...
Page 26: ...Setting Up a Basic Configuration 26 ...
Page 38: ...Importing and Exporting Configurations for Deployment 38 ...
Page 54: ...Using Herculon SSL Orchestrator Analytics 54 ...
