Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual download pdf (Page 22)

ServerIron ADX Firewall Load Balancing Guide 11

53-1002436-01

Basic FWLB topology

DRAFT: BROCADE CONFIDENTIAL

Basic FWLB topology

You can configure basic FWLB by deploying one ServerIron ADX on the enterprise side of the

firewalls and another ServerIron ADX on the Internet side of the firewalls.

A basic FWLB topology uses two ServerIron ADXs to load balance traffic across Layer 3 firewalls.

The firewalls can be synchronous or asynchronous.

In the basic configuration, one ServerIron ADX connects to all the firewalls on the private network

side. The other ServerIron ADX connects to all the firewalls on the Internet side. The ServerIron

ADXs balance firewall traffic flows across the firewalls.

Figure 2 shows an example of a basic FWLB topology.

FIGURE 2 Basic FWLB topology

As shown in this example, each ServerIron ADX is configured with paths through the firewalls to the

other ServerIron ADX. The ServerIron ADXs use these paths as part of the load balancing

mechanism to ensure that traffic for a given IP source and IP destination always passes through

the same firewall. All FWLB configurations require paths.

SI-A

Layer 3

Firewall-2

Layer 3

Firewall-1

SI-B

Internet Router

Internal Router

1 2 ... 17 18 19 20 21 22 23 24 25 26 27 ... 187 188

No comments

Brocade Communications Systems ServerIron ADX 12.4.00 Service Manual Page 22