It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

How to Configure Failover and Load Balancing in Custom Connection Objects

  • Last updated on

For custom connection options, you can configure failover and load balancing policies. You can configure up to 7 alternatives to the default translated source IP policy.

Step 1. Create a Custom Connection Object

Create a custom connection object using one of the following Translated Source IP polices:

  • Original Source IP
  • Dynamic NAT 
  • Network Interface
  • Explicit IP

conn_obj_lb_00_01.png

For more information, see How to Create a Custom Connection Object.

2. Configure Failover and Load Balancing Settings

In the Failover and Load Balancing section of the custom connection object you created in step 1 you can configure the policy and the alternative translated source IPs.

Failover

  1. From the Policy list select Failover.

  2. Click + to add alternative connections to the Alternatives list.

  3. For each entry click on the edit symbol in the Type column and select how the translated source IP is determined:

    • Explicit IP – Enter the new source IP address in the Value column.
    • Network Interface – Enter the network interface in the Value column.
    • Original Source IP
    • Dynamic NAT
    conn_obj_lb_01_01.png
  4. Click OK.
  5. Click Send Changes and Activate.

Weighted Round Robin

  1. From the Policy list select Weighted Round Robin.

  2. Click + to add alternative connections to the Alternatives list.

    • Explicit IP – Enter the new source IP address in the Value column.

    • Network Interface – Enter the network interface in the Value column.

    • Original Source IP 

    • Dynamic NAT

  3. (optional) In the NAT Settings enter the Weight.
  4. (optional) In the Alternatives list enter the Weight for each alternative connection.
    conn_obj_lb_02.png
  5. Click OK .
  6. Click Send Changes and Activate.

Weighted Random

  1. From the Policy list select Weighted Random.

  2. Click + to add alternative connections to the Alternatives list.

    • Explicit IP – Enter the new source IP address in the Value column.

    • Network Interface – Enter the network interface in the Value column.

    • Original Source IP 

    • Dynamic NAT

  3. (optional) In the NAT Settings enter the Weight.
  4. (optional) In the Alternatives list enter the Weight for each alternative connection.
    conn_obj_lb_02_01.png
  5. Click OK.
  6. Click Send Changes and Activate.

Source IP Hash

  1. From the Policy list select Source IP Hash.

  2. Click + to add alternative connections to the Alternatives list.

    • Explicit IP – Enter the new source IP address in the Value column.

    • Network Interface – Enter the network interface in the Value column.

    • Original Source IP 

    • Dynamic NAT

  3. (optional) In the NAT Settings enter the Weight.
  4. (optional) In the Alternatives list enter the Weight for each alternative connection.
    conn_obj_lb_04.png
  5. Click OK.
  6. Click Send Changes and Activate.

Provider Optimization

Provider Optimization selects the optimal TCP connection by determining the provider with the fastest response time to TCP probing packets sent by the firewall. The option requires you to specify at least two connections to rival, e.g., an interface, a dynamic IP, an explicit IP.

This option needs to activate Feature Level 8.0.

  1. From the Policy list, select Provider Optimization.
  2. Click + to add connections for probing to the Alternatives list.
    • Explicit IP – Enter the new source IP address in the Value column.

    • Network Interface – Enter the network interface in the Value column.

    • Original Source IP 

    • Dynamic NAT

  3. (optional) In the NAT Settings, enter the Weight.
  4. (optional) In the Alternatives list, enter the Weight for each alternative connection.
    conn_object_proivder_optimization_01_01.png

Next Steps

Create a Pass, Dst NAT or Broad-Multicast access rule and select the connection object as the Connection Method.

For more information, see Access Rules.