I segmented my network and locate some important servers behind of firewall. So, I restricted traffic LAN (no segmentation between LAN clients, LAN servers) to/from important servers. These servers are cluster and they are in same VLAN. I configured my firewall as controlling traffic VLANs', not traffic in same VLAN. Now I have an F5 Load Balancer for balancing application traffic which will come from LAN. SSH and RDP wont be in F5. I am not sure where I locate it. I think I have 3 choices;
- Locate it to LAN. In this case, all LAN segment can access it, because no segmentation. But traffic of F5 to important servers will be controlled via Firewall.
- Locate it to VLAN of important servers, behind firewall. In this case, access to F5 from LAN will be controlled, but not between F5 and important servers, because they are in same VLAN.
- Locate it different VLAN behind firewall. In this case traffic from LAN to F5 and F5 to important servers will be controlled via Firewall.