Hi:

 

At the moment we perform TCP health check via F5 on ports 389/636 (historical inheritance) – which isn’t sufficient for HA.

 

We are moving to an env where NSX and F5 may co-exist – and have an opportunity to re-work the LB health check for HA (on existing F5 and upcoming NSX).

 

If running NSX and/or F5 (or other load balancers) – how do you determine health on ldap node?

 

We have 2 read/write (1 active at given time) – replicating to N read-only nodes.