It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda Web Application Firewall
Overview Documentation Training Certification Materials

How Barracuda CloudFormation Template Works in PAYG/Hourly Instance

  • Last updated on

The following flowchart explains how the Barracuda CloudFormation Template works:

Auto scaling flow chart1.png

With regard to the flowchart, the following steps describe how a Barracuda CloudFormation Template works:

  1. A CloudFormation Template (CFT) is uploaded and a stack is created on Amazon Web Services. With this:
    1. An Amazon S3 bucket gets created with the specified stack name and unique ID.
    2. An appropriate IAM role to access the S3 bucket is added.
  2. The Barracuda Web Application Firewall VM(s) will be deployed and provisioned in the Virtual Private Cloud (VPC) specified while creating the stack.
  3. After the Barracuda Web Application Firewall VM(s) is/are up and ready to serve the traffic:
    1. It checks the S3 bucket created in step 1 (a) for any other existing VM(s) in this Auto Scaling group.
      1. If there is no VM data available in the S3 bucket, the VM is configured based on the service configuration data provided during CFT upload.
      2. If there is any VM information available in the S3 bucket, the VM clusters with the existing VM and gets all configuration synchronized to it.
    2. Adds its information to the S3 bucket created in step 1 (a). Typically, an S3 bucket stores the instance data such as serial number and primary IP address (i.e., WAN IP address) of the deployed Barracuda Web Application Firewall VM(s).
  4. The Barracuda Web Application Firewall is now ready to serve the traffic to the configured services.
  5. If the instance encounters high traffic flow and triggers any of the created alarms, such as high bandwidth utilization, CPU usage, etc., then:
    1. A new Barracuda Web Application Firewall for AWS instance gets initiated automatically.
    2. Looks at the S3 bucket created in step 1 (a) and clusters with it.
    3. Adds its information to the S3 bucket, and is ready to serve the traffic.
    4. Traffic gets distributed among the instances through ELB.

Next Step

Continue with the  Importing the Barracuda Web Application Firewall PAYG CFT and Deploying the Instance article to import the CFT and deploy the instance.