Whenever users need to ensure reliability of their internet access, you can implement a Load Balancer in your network in order to allow high availability of IWSVAs.
This article explains the different options and configurations so that can be achieved with Loadbalancer.org appliances.
Load Balancing in IWSVA 6.5 Service Pack 2 is supported in the following two deployment scenarios with Loadbalancer.org appliances:
- Forward Proxy Mode (also indicated here as Explicit Proxy Mode)
- Simple Transparency Mode
Since Load Balancer includes special scenarios, IWSVA needs to enable specific firewall rules. Here are the examples:
-
Example 1:
If IWSVA is deployed in Explicit Proxy Mode and Direct Routing is selected as forwarding method in Load Balancer, add the following rule to IWSVA:
iptables -t nat -A PREROUTING -p tcp -d <VIP address> -j REDIRECT
For instance, if the Virtual Service IP address is 192.168.2.202, the corresponding rule would be the following:
iptables -t nat -A PREROUTING -p tcp -d 192.168.2.202 -j REDIRECT
-
Example 2:
If IWSVA is deployed in Simple Transparency Mode and Transparent Routed Proxy Mode is selected as forwarding method in Load Balancer, add the following rule to IWSVA:
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
For further details, refer to the Load Balancer Deployment Guide.
