Load balance topic. One-Arm mode require ESG instance for each LB requirement?

[pcparts001]

Hello

Most document states One-Arm mode downside is that for each LB(One-Arm) requirements, separate

ESG instance is needed.

Is this true?

I feel like I can deploy one ESG for 9 one-arm load balance as following setting.

-Deploy one ESG

-Add 9 vNIC to the ESG and add IP address of LB segment for each. (EX. 10.0.0.1/24 to first vNIC, 10.0.10.1/24 to second vNIC and so on...)

-Disable routing

-Add LB VIP/Pool as usual.

I stated "9" for limitation, because there is VM limitation of 10 vNIC, and 1 might be used for future uplink....

I'm sorry that I can't prove this by testing, because I do not have testing environment.

[ddesmidt · Accepted solution]

Number of subnets in 1 single Edge

One single Edge can actually be connected to more than 10 networks.

Indeed 1 Edge interface can be of type: "Unlink", "Internal", but also "Trunk".

Using the type "trunk", you can create sub-interfaces and up to 200 sub-interfaces supported in 6.1.x within the same interface.

Now about your question: 1 Edge LB per subnet

You can definitely have the same Edge with multiple interfaces / subnets, and configure VIP in each subnet.

Note: You'll need non-transparent mode (SNAT) under pool to guaranty to the server response will go back via the Edge-LB.

The question I have is on your point:"Disable routing".

Are you saying the Edge will not need any route to reply to the clients. In other words all the clients' requests hitting an Edge-LB VIP comes from a subnet that exists on the Edge?

If the answer to that question is "yes". Then I agree.

If the answer to that question is "no" (clients come from Internet for instance). Then I disagree.

Dimitri

[pcparts001]

Dimitri

Thank you for your response!

>If the answer to that question is "yes". Then I agree.

>If the answer to that question is "no" (clients come from Internet for instance). Then I disagree.

I didn't thought of so deep.  I understand that if the answer is "no", then I need separate ESG for all of segment for lb, because

I can't set default route.(Route back to client)

Thank you again.

[ddesmidt]

You can still have 1 Edge with many subnets.

But you definitely need a route (default gateway).

Dimitri

[pcparts001]

Yes, I see your point.  I'll remember that at VCIX exam.