As part of F5s deployment in Azure, we do have NSG rules defined using ASGs.
Current bigip module do not support ASG association. Without this support we cannot define NSG rules using ASGs. Using only IPs is a concern as we have other instances in mgmt subnet we do not want those instances to have access to F5s.
We are already passing in subnets and nsg information to bigip module.
If bigip module support ASG association then it will help us to define NSG rules before deploying F5s.
As part of F5s deployment in Azure, we do have NSG rules defined using ASGs.
Current bigip module do not support ASG association. Without this support we cannot define NSG rules using ASGs. Using only IPs is a concern as we have other instances in mgmt subnet we do not want those instances to have access to F5s.
We are already passing in subnets and nsg information to bigip module. If bigip module support ASG association then it will help us to define NSG rules before deploying F5s.