Hello
Most document states One-Arm mode downside is that for each LB(One-Arm) requirements, separate
ESG instance is needed.
Is this true?
I feel like I can deploy one ESG for 9 one-arm load balance as following setting.
-Deploy one ESG
-Add 9 vNIC to the ESG and add IP address of LB segment for each. (EX. 10.0.0.1/24 to first vNIC, 10.0.10.1/24 to second vNIC and so on...)
-Disable routing
-Add LB VIP/Pool as usual.
I stated "9" for limitation, because there is VM limitation of 10 vNIC, and 1 might be used for future uplink....
I'm sorry that I can't prove this by testing, because I do not have testing environment.
Number of subnets in 1 single Edge
One single Edge can actually be connected to more than 10 networks.
Indeed 1 Edge interface can be of type: "Unlink", "Internal", but also "Trunk".
Using the type "trunk", you can create sub-interfaces and up to 200 sub-interfaces supported in 6.1.x within the same interface.
Now about your question: 1 Edge LB per subnet
You can definitely have the same Edge with multiple interfaces / subnets, and configure VIP in each subnet.
Note: You'll need non-transparent mode (SNAT) under pool to guaranty to the server response will go back via the Edge-LB.
The question I have is on your point:"Disable routing".
Are you saying the Edge will not need any route to reply to the clients. In other words all the clients' requests hitting an Edge-LB VIP comes from a subnet that exists on the Edge?
If the answer to that question is "yes". Then I agree.
If the answer to that question is "no" (clients come from Internet for instance). Then I disagree.
Dimitri
Number of subnets in 1 single Edge
One single Edge can actually be connected to more than 10 networks.
Indeed 1 Edge interface can be of type: "Unlink", "Internal", but also "Trunk".
Using the type "trunk", you can create sub-interfaces and up to 200 sub-interfaces supported in 6.1.x within the same interface.
Now about your question: 1 Edge LB per subnet
You can definitely have the same Edge with multiple interfaces / subnets, and configure VIP in each subnet.
Note: You'll need non-transparent mode (SNAT) under pool to guaranty to the server response will go back via the Edge-LB.
The question I have is on your point:"Disable routing".
Are you saying the Edge will not need any route to reply to the clients. In other words all the clients' requests hitting an Edge-LB VIP comes from a subnet that exists on the Edge?
If the answer to that question is "yes". Then I agree.
If the answer to that question is "no" (clients come from Internet for instance). Then I disagree.
Dimitri
Dimitri
Thank you for your response!
>If the answer to that question is "yes". Then I agree.
>If the answer to that question is "no" (clients come from Internet for instance). Then I disagree.
I didn't thought of so deep. I understand that if the answer is "no", then I need separate ESG for all of segment for lb, because
I can't set default route.(Route back to client)
Thank you again.
You can still have 1 Edge with many subnets.
But you definitely need a route (default gateway).
Dimitri
Yes, I see your point. I'll remember that at VCIX exam.