Article Id
193520
Description
This article provides an example of the steps required to use FortiOS in Load Balance mode for a cluster of HTTP servers.
Scope
FortiOS 4.0 in NAT Mode.
Solution
2. Create Real Server(s).
3. Apply Virtual server to policy.
This article provides an example of the steps required to use FortiOS in Load Balance mode for a cluster of HTTP servers.
Firewall Virtual IP Load balance features were present in v3.0. This only included traffic at the Network Layer; layer 3. FortiOS 4.0 now includes features to balance traffic at layer 3 as well as the application layer, layer 7.
FortiOS 4.0 VIP Load Balancing feature uses a combination of three features: SSL Acceleration, HTTP multiplexing and Extended Health checking.
Scope
FortiOS 4.0 in NAT Mode.
Solution
In order to create a load balance scenario, HTTP in this example, the 'Load Balance' menu item in the firewall menu will be used. This menu allows user to configure all the new Server Load Balancing components.
1. Create Virtual Server.
A Virtual server is to be created as the publicly facing server clients are connecting to. This server will handle connections to one or many Real servers.
Firewall > Load Balance, new Virtual Server.
When defining Virtual Servers, users will define the Protocol, IP address, physical interface as well as the method to be used to load balance. At this point remaining features may also be enabled. Such as HTTP Multiplexing, Extended Health Checking and SSL Offloading (SSL and HTTPS only).
Choose Load Balance Method.
2. Create Real Server(s).
Once a Virtual Server has been created Real servers will be created to represent each server being accessed.
Firewall - Load Balance menu, Real Server tab.
In creating a Real Server, the selection is made to choose which Virtual Server this server will be accessed through. Multiple Real Servers will be used by one Virtual server when creating a load balance scenario.
CLI: From the CLI Virtual servers as well as Real servers may be configured:
#config firewall virtual server
FG300B3908604677 (vip) #
edit add/edit a table value
delete delete a table value
purge clear all table value
rename rename a table entry
get get dynamic and system information
show show configuration
end end and save last configFG300B3908604677 (vip) # edit
name virtual ip name
VirtualFG300B3908604677 (vip) # edit Virtual
<Enter>FG300B3908604677 (Virtual) # config
realservers real servers
As the goal of this feature is to allow more than one Real server to use one Virtual Server, user will normally set more than one Real server to a virtual server definition.
Multiple Real Servers using one Virtual Server.
3. Apply Virtual server to policy.Using the newly created Virtual Server as a destination. Create the corresponding policy. The source interface must be that which was associated to the Virtual Server when it was created. In this example using Port2.
Once this policy is created using the correct source interface, destination address selected may be the Virtual Server. This server in turn handles Load Balancing attributes previously configured.
Virtual Server Policy
Related Articles
Technical Tip : Troubleshoot and verify if traffic is hitting a Firewall Policy
