How to Load Balance Barracuda Web Security Gateway With the Barracuda Load Balancer ADC

1. Configure the MGMT IP address, Netmask, Gateway, and DNS server address via the console interface.
2. Log in to the Barracuda Load Balancer ADC web Interface as admin.
3. Add a Custom Virtual Interface. The Barracuda Load Balancer ADC uses this interface to communicate to Barracuda Web Security Gateway instances. Go to the NETWORK > Interfaces page. Give the interface a Name and enter an IP Address, Netmask and select the Network Interface (example: ge-1-1). Click Save.
4. Add a default Gateway. Go to the NETWORK > Routes page and enter an IP Address (0.0.0.0), Netmask (0.0.0.0), Gateway Address and select a Network Interface (example: ge-1-1). Click Save.
5. Create a Service on the Barracuda Load Balancer ADC. Go to the BASIC > Services tab and click Add Service.
   
   

   1. Enter the following example values for the new Service:

      Name	Service Type	Group	IP Address	Service Port	Netmask	Interface	Session Timeout	Load Balancing Section
      WSGProxySVC	Layer 4-TCP	(optional)	The proxy IP address to which all clients will send their web traffic.	3128	255.255.255.255	Interface to which client web traffic should be sent: ge-1-1	1200	Persistence Type: Source IP Persistence Time: 1200

   2. Click Create.

6. Click Add Server. Add the IP address of ( one of ) the Barracuda Web Security Gateway instance(s) to the Barracuda Web Security Gateway WSGProxySVC Service. 
7. Enter the IP address of the Barracuda Web Security Gateway and port as 3128.
8. Select Enable for the Direct Server Return and click Create.

Repeat the above step for each Barracuda Web Security Gateway instance to be load balanced.

Step 2. Configure the Barracuda Web Security Gateway

1. Ensure that the Barracuda Web Security Gateway firmware is on 12.0.027 or above.
2. Configure the Barracuda Web Security Gateway for Forward Proxy Deployment.
3. Create a Virtual Interface to receive traffic from the Barracuda Load Balancer ADC by doing the following:
   
   1. Go to the ADVANCED > Advanced Networking page.
   2. In the Virtual Interfaces section, enter the IP Address of the Service you created on the Barracuda Load Balancer ADC.
   3. Enter the Netmask as 255.255.255.255.
   4. Select Loopback Port in the Device dropdown. You do not need to enter a Gateway Address. Click Add.

Repeat the above steps on each Barracuda Web Security Gateway instance.

Step 3. Monitor the Service on the Barracuda Load Balancer ADC

1. Log in to the web Interface of the Barracuda Load Balancer ADC as admin.
2. Go to the BASIC > Services page and select the Barracuda Web Security Gateway WSGProxySVC.
3. The Service must show a green tick icon for each of the Barracuda Web Security Gateways added as a server.

Step 4. Verify the Configuration

At this point, client browsers should be configured with the proxy settings using the Barracuda Web Security Gateway WSGProxySVC IP address and port 3128. When the client accesses any website such as cnn.com, traffic from the client will go the Barracuda Web Security Gateway WSGProxySVC on the Barracuda Load Balancer ADC. The Barracuda Load Balancer ADC will then send the traffic to one of the Barracuda Web Security Gateway instances configured as Servers.

If all the Barracuda Web Security Gateway instances are not the same model, you can modify the weights for each server to match its capability. Higher model instances should have higher weights. By default, weights are set to 1, which means all instances of the Barracuda Web Security Gateway are of equal capacity.