Re: BigIP controller - any issues?

[Adam Shostack <adam () homeport org>]

On Fri, Oct 01, 1999 at 01:11:39PM -0400, Joseph S D Yao wrote:
| ...
| > IP forwarding on BigIP has to be specifically enabled. Out of the box
| > it is setup as default DENY. In other words, only those IPs and services
| > setup with VIPs will get traffic. Also ICMPs are not passed, except for
| > Fragment/Dont Fragment. ...
| 
| Ah.  This might explain why a dual firewall with a BigIP in front of it
| might be able to talk to some hosts, but fail with large mail messages
| to certain MSW-NT servers.  No packet size negotiation?  This is
| important when going through a tunnel, since the tunnel envelope would
| take up some of what would otherwise be the usual packet size.
| 
| Sound about right?


Don't know about that, but I'd like to ask a related question, which
is, has anyone looked at these things for UDP based traffic?  I have
some VPN-esque technology which encapsulates in UDP, and and wondering 
if the F5 boxes can help me with load balancing.

Adam


-- 
"It is seldom that liberty of any kind is lost all at once."
                                                       -Hume