Load Balancing

how to load balancing in NGAF?

Hello,

What You Mean Load Balancing Internet ?
if yes,
you can use Policy Base Route (PBR) with selected method -> ussualy with round Robin

Hello Dear

NGAF (Next-Generation Application Firewall) is a security solution that provides application-aware firewalling, intrusion prevention, and advanced threat protection. To configure load balancing in NGAF, follow these general steps:

1. Enable Load Balancing: Navigate to the NGAF management interface and enable load balancing.
2. Define Server Groups: Create server groups that represent the servers you want to load balance.
3. Configure Virtual Servers: Set up virtual servers that will receive incoming traffic and distribute it to the server groups.
4. Specify Load Balancing Algorithm: Choose a load balancing algorithm (e.g., round-robin, least connections, IP hash) to determine how traffic is distributed among servers.
5. Configure Session Persistence: Set up session persistence to ensure that incoming requests from a client are directed to the same server for a specified period.
6. Monitor and Adjust: Continuously monitor the load balancing performance and adjust the configuration as needed to ensure optimal traffic distribution.

Please note that the specific steps may vary depending on the NGAF version and your specific use case. It's recommended to consult the NGAF documentation and/or contact the vendor's support for detailed instructions and guidance.

Hi, could you please add more detail on your question? I suppose that you want to redistribute traffic on NGAF or NSF on more wan that you have configured. In order to do so, you need to create some specific rules in order to set a specific wan for specific type of traffic. Or if you need to be able to use more wan (besides of the traffic type), as suggested before, try configure a polcy based route that use all the wan you have available (round robin works perfectly on this case). Keep in mind that if you have some specific resource outside you need to reach that filter your connections through public ip, you need to set a policy that force one specific wan.

Hi,

1. Server Load Balancing (SLB)
Sangfor NGAF supports Server Load Balancing, which allows you to distribute incoming traffic across multiple backend servers to ensure optimal resource utilization and high availability. Here’s how you can set it up:
Configuration Steps:
Backend Server Configuration: Ensure your backend servers (e.g., web servers, application servers) are properly configured and accessible to the NGAF.
SLB Configuration in NGAF:
Create a Server Group: Define a server group in NGAF that includes the IP addresses or hostnames of your backend servers.
Define Load Balancing Algorithm: Choose a load balancing algorithm (such as Round Robin, Least Connections, Weighted Round Robin) that suits your traffic distribution needs.
Health Check Settings: Configure health checks to monitor the status of backend servers. NGAF can periodically check the availability and responsiveness of servers to ensure traffic is routed only to healthy servers.
Virtual Server Configuration: Set up a virtual server in NGAF with a virtual IP address and define the SLB policy (server group, load balancing algorithm, etc.) for incoming traffic.
Service Port Configuration: Specify the service ports (e.g., HTTP/HTTPS ports) for which the SLB configuration applies.
Benefits of SLB in NGAF:
High Availability: Distributes traffic evenly across multiple servers, reducing the risk of server overload and improving application uptime.
Scalability: Easily add or remove backend servers from the server group without disrupting service.
Performance Optimization: Efficiently utilize server resources to handle varying levels of traffic and requests.
2. Global Server Load Balancing (GSLB)
If you have multiple sites or data centers, Sangfor NGAF also supports Global Server Load Balancing for distributing traffic across geographically dispersed servers. GSLB helps optimize application delivery and enhance disaster recovery capabilities.
Additional Considerations:
SSL Offloading: Sangfor NGAF can perform SSL/TLS termination, offloading the encryption/decryption workload from backend servers to improve performance and scalability.
Application Layer Load Balancing: Beyond basic TCP/UDP load balancing, NGAF can intelligently distribute traffic based on application-specific criteria (e.g., HTTP headers, URL paths) for more granular control.
Monitoring and Reporting: NGAF provides visibility into traffic distribution, server health status, and performance metrics through its monitoring and reporting features, allowing administrators to optimize load balancing configurations based on real-time data.

HiHi,

Please refer to the attached document for the Link Load Balancing Configuration for your easy Ref.

Link load balancing Route.pdf (116.91 KB, Downloads: 109)

23 Jul 2024 15:35 Upload

Click file name to download attachment