F5 BIG-IP VE: Cluster-Ready, 4-nic¶
Overview¶
This template deploys a “cluster-ready” pair of BIG-IP Virtual Edition (VE) devices. Each device has four (4) network interfaces: management, control, and two (2) data interfaces. The control interface (“HA”) allows connection failover traffic, configuration synchronization, and connection mirroring. Using a control interface allows for the separation of control traffic from client/user data.
Prerequisites¶
- F5 Plugins for OpenStack Heat installed on the Neutron controller.
- BIG-IP security groups configured in OpenStack.
- SSH key(s) configured in OpenStack.
- BIG-IP VE image uploaded to Glance.
- BIG-IP license base key.
- Three (3) VLANs configured in Neutron – ‘mgmt’, ‘control’, and ‘data’ – to use for system management, high availability, and data traffic, respectively.
- Basic understanding of BIG-IP device service clustering.
Caveats¶
- BIG-IP VE images come in different sizes. The Nova compute flavor you should use for your image depends on the image’s disk size requirements. See the F5 OpenStack BIG-IP flavor matrix for more information.
Configuration Parameters¶
Parameter | Type | Description | Default |
---|---|---|---|
Stack Name | string | Provide a name for the stack | N/A |
Creation Timeout | integer | Length of time after which stack creation will time out (minutes) | N/A |
Password for user “<username>” | string | The password for your OpenStack user account | N/A |
F5 VE Image | string | Choose a BIG-IP VE image from the dropdown list | N/A |
F5 VE Flavor | string | Choose a flavor for the BIG-IP VE | N/A |
Use Config Drive | boolean | Use config drive to provide meta and user data | False |
F5 Root SSH Key Name | string | Choose an ssh key-pair; used for authentication to the BIG-IP VE instances | N/A |
F5 VE Admin User Password | string | Create a password for the BIG-IP VE ‘admin’ user account | N/A |
F5 VE Root User Password | string | create a password for the BIG-IP VE ‘root’ user account | N/A |
Security Group for the data network | string | Enter the name of a security group | N/A |
Security Group for the control network | string | Enter the name of a security group | N/A |
Security Group for the management network | string | Enter the name of a security group | N/A |
Primary VE License Base Key | string | Enter your F5 license base registration key | N/A |
External Network | string | Choose the external network from the list | N/A |
VE Management Network | string | Assign a Neutron subnet to the management interface on the BIG-IP VE instances | N/A |
VE HA Network | string | Assign a Neutron subnet to the high availability interface on the BIG-IP VE instances | N/A |
VE Network for the 1.2 Interface | string | Assign a Neutron network to the 1.2 interface on the BIG-IP VE instances | N/A |
Name for Network 1.2 | string | Enter a name for the 1.2 network on the BIG-IP VE instances | data1 |
VE Network for the 1.3 Interface | string | Assign a Neutron network to the 1.2 interface on the BIG-IP VE instances | N/A |
Name for Network 1.3 | string | Enter a name for the 1.3 network on the BIG-IP VE instances | data2 |
Default Gateway IP | string | Enter the Gateway IP address to use for the BIG-IP VE instances | none |
Deployment¶
See the F5 HOT deployment instructions.