Load Balancing in IWSVA 6.5 Service Pack 2 is supported in the following two deployment scenarios with Loadbalancer.org appliances:

• Forward Proxy Mode (also indicated here as Explicit Proxy Mode)
• Simple Transparency Mode

Since Load Balancer includes special scenarios, IWSVA needs to enable specific firewall rules. Here are the examples:

• Example 1:

  If IWSVA is deployed in Explicit Proxy Mode and Direct Routing is selected as forwarding method in Load Balancer, add the following rule to IWSVA:

  iptables -t nat -A PREROUTING -p tcp -d <VIP address> -j REDIRECT

  For instance, if the Virtual Service IP address is 192.168.2.202, the corresponding rule would be the following:

  iptables -t nat -A PREROUTING -p tcp -d 192.168.2.202 -j REDIRECT

• Example 2:

  If IWSVA is deployed in Simple Transparency Mode and Transparent Routed Proxy Mode is selected as forwarding method in Load Balancer, add the following rule to IWSVA:

  iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080

For further details, refer to the Load Balancer Deployment Guide.