You need to implement Active/Active explicit proxy with high availability.
Note: This article uses Proxy1 and Proxy2 as examples.
To have Active/Active explicit deployment with high availability for ProxySG appliances, you must balance the load of traffic from the source and then configure failover groups on each proxy.
Configure the clients to send an equal amount of traffic to each proxy using one of the following methods:
To have high availability, make sure that each proxy is able to process the traffic of the other proxy when it is down.
Configure two failover groups on each proxy:
In this example configuration, the following could occur:
Implement Active/Active explicit proxy with high availability for two proxies, Proxy1 (IP address 10.10.10.1) and Proxy2 (IP address 10.10.10.2).
Example on how configure the settings.
On the first proxy, create the first failover group - "proxy1".
To configure failover:
1. Select the Configuration > Network > Advanced > Failover tab.
2. Click New. The Add Failover Group dialog displays.
3. Create a group using either a new IP address or an existing IP address.
4. Configure group options:
a. Multicast address - Set this to 224.1.2.3
b. Relative Priority - Checked the "Master" option.
c. (Optional) Advertisement Interval - Leave the default value.
d. (Optional, but recommended) Group Secret - Can leave this empty.
5. Select enabled.
6. Click OK to close the dialog.
7. Click Apply.
Still on the first proxy, create the second failover group - "proxy2". You just need to repeat the steps above but set the following settings:
Group IP - A different IP than the one your created above. Eg: 10.9.10.151
Multicast address - Set this to 224.1.2.4
Relative Priority - Leave the default value. The "Master" option should be unchecked.
(Optional) Advertisement Interval - Leave the default value.
(Optional, but recommended) Group Secret - Can leave this empty.
Then on the second proxy, follow the steps above to create the two failover groups.
Follow ALL the settings (same IP, same multicast address) from the first proxy EXCEPT for:
Relative Priority - Leave the default value. The "Master" option should be unchecked.
And on "proxy2" failover group, follow ALL the settings (same IP, same multicast address) EXCEPT for:
Relative Priority - Checked the "Master" option.