Deploying a VNF

Before you start deploying VNF, meet the following requirements:

1. Ensure that the VNF data interface is on the same shared subnet as the NLB, which is created in Creating a network load balancer with routing mode.

2. Ensure that the VNF data interface (shared subnet with NLB) shows Allow IP Spoofing as enabled. You can enable this function through the Virtual server instances for VPC UI in the Network interfaces section of a virtual server's details page.

   For more information about IP spoofing, see About IP spoofing checks.

3. Enable health checks from the NLB for your VNF configuration. HTTP and TCP are supported.

   To enable the VNF interfaces and policies to accept the NLB health checks, you must first retrieve the NLB IP addresses.

   Keep in mind:

   • The NLB is deployed as an active/passive cluster. Each node has a distinct IP address.

   • You must use the active IP address in the custom routes that are created later in this process.

     To retrieve the IP addresses, go to the Load balancers for VPC page in the IBM Cloud console, and select the name of the NLB in the table to show its details. In the Load balancer details section (Overview tab), the Private IP addresses are shown. The first IP is the primary IP address.

     Because NLB failovers can occur, you must configure the VNF to accept health check requests on both IP addresses.