We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Web Security Gateway

How to Load Balance Barracuda Web Security Gateway With the Barracuda Load Balancer ADC

  • Last updated on

This article details how to load balance multiple instances of the Barracuda Web Security Gateway (hardware appliances only), where the Barracuda Web Security Gateway is deployed in forward proxy mode. The Barracuda Load Balancer ADC must be running version 6.0.0.008 or higher.

Step1. Set up the Barracuda Load Balancer ADC

  1. Configure the MGMT IP address, Netmask, Gateway, and DNS server address via the console interface.
  2. Log in to the Barracuda Load Balancer ADC web Interface as admin.
  3. Add a Custom Virtual Interface. The Barracuda Load Balancer ADC uses this interface to communicate to Barracuda Web Security Gateway instances. Go to the NETWORK > Interfaces page. Give the interface a Name and enter an IP Address, Netmask and select the Network Interface (example: ge-1-1). Click Save.
  4. Add a default Gateway. Go to the NETWORK > Routes page and enter an IP Address (0.0.0.0), Netmask (0.0.0.0), Gateway Address and select a Network Interface (example: ge-1-1). Click Save.
  5. Create a Service on the Barracuda Load Balancer ADC. Go to the BASIC > Services tab and click Add Service.

    1. Enter the following example values for the new Service:

      Name

      Service Type Group

      IP Address

      Service Port  Netmask Interface Session Timeout Load Balancing Section

      WSGProxySVC

       

      Layer 4-TCP (optional)

      The proxy IP address to which all clients will send their web traffic.

      3128 255.255.255.255

      Interface to which client web traffic should be sent:
      ge-1-1
      1200 Persistence Type: Source IP
      Persistence Time: 1200
    2. Click Create.

  6. Click Add Server. Add the IP address of ( one of ) the Barracuda Web Security Gateway instance(s) to the Barracuda Web Security Gateway WSGProxySVC Service. 
  7. Enter the IP address of the Barracuda Web Security Gateway and port as 3128.
  8. Select Enable for the Direct Server Return and click Create.

Repeat the above step for each Barracuda Web Security Gateway instance to be load balanced.

Step 2. Configure the Barracuda Web Security Gateway

  1. Ensure that the Barracuda Web Security Gateway firmware is on 10.0.0.015 or above.
  2. Configure the Barracuda Web Security Gateway for Forward Proxy Deployment.
  3. Create a Virtual Interface to receive traffic from the Barracuda Load Balancer ADC by doing the following:
    1. Go to the ADVANCED > Advanced Networking page.
    2. In the Virtual Interfaces section, enter the IP Address of the Service you created on the Barracuda Load Balancer ADC.
    3. Enter the Netmask as 255.255.255.255.
    4. Select Loopback Port in the Device dropdown. You do not need to enter a Gateway Address. Click Add.

Repeat the above steps on each Barracuda Web Security Gateway instance.

Step 3. Monitor the Service on the Barracuda Load Balancer ADC

  1. Log in to the web Interface of the Barracuda Load Balancer ADC as admin.
  2. Go to the BASIC > Services page and select the Barracuda Web Security Gateway WSGProxySVC.
  3. The Service must show a green tick icon for each of the Barracuda Web Security Gateways added as a server.

Step 4. Verify the Configuration

At this point, client browsers should be configured with the proxy settings using the Barracuda Web Security Gateway WSGProxySVC IP address and port 3128. When the client accesses any website such as cnn.com, traffic from the client will go the Barracuda Web Security Gateway WSGProxySVC on the Barracuda Load Balancer ADC. The Barracuda Load Balancer ADC will then send the traffic to one of the Barracuda Web Security Gateway instances configured as Servers.

If all the Barracuda Web Security Gateway instances are not the same model, you can modify the weights for each server to match its capability. Higher model instances should have higher weights. By default, weights are set to 1, which means all instances of the Barracuda Web Security Gateway are of equal capacity.

Last updated on