How to configure a Proxy to Load Balance to an upstream Proxy/Proxies

book

Article ID: 169868

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

When there is a need to forward traffic from downstream Proxy to upstream Proxies and load balance those connections.

Environment

  • Downstream Proxy
  • Upstream Proxy/Proxies

Resolution

To configure the Downstream Proxy to send to one or multiple Proxies upstream we will first start with creating the Forwarding Hosts to be used. Forwarding to upstream Proxy/Proxies will be an Explicit Connection.

Create the Forwarding Hosts

  • Go to Configuration Tab > Forwarding Hosts > Forwarding Hosts Tab
  1. Click New
  2. Enter Name of the Proxy in the Alias field
  3. Enter the IP of the Proxy
  4. Leave the default type of Proxy
  5. Check the HTTP box and enter the port that is configured on the upstream Proxy to accept the Downstream Explicit Connections
  6. Click OK
  7. Click apply
  • NOTE: Repeat above Steps for each upstream Proxy that will be needed, otherwise move to next steps

Create the Forwarding Group that will be Load Balanced

  • Go to Configuration Tab > Forwarding Hosts > Forwarding Groups Tab
  1. Click New
  2. Enter the Name for the Group desired
  3. From the Members box click on the Forwarding Hosts to be part of the group and click Add
  4. From the Load Balancing Method choose the desired method for Load Balancing. The default is Round Robin, But Least Connections might be better if wanting to have more balance as we do not monitor sessions the upstream has. The Proxy is only aware of how many connections we have with the upstream Proxy.
  5. Click OK
  6. Click Apply

Create a Policy in the VPM in a Forwarding Layer to Forward to the just configured Forwarding Group

  • Go to Configuration Tab > Policy > Visual Policy Manager (VPM)
  1. Open the VPM 
  2. If there is no current Forwarding Layer, add a new Forwarding Layer
  3. Right click the Action > Set >  New > Click on "Select Forwarding" Object (Conditions are subject to deployment and need)
  4. In the Forwarding Object, Click on the Forwarding Group and click Add
  5. Choose the action for "If no forwarding host is available" (default is Deny)
  6. Click OK
  7. Click Install Policy

All new traffic will evaluate the rule and be load balanced to the Forwarding Group.

PLEASE NOTE:
There will be Policy and connections going to the upstream Proxy that might need to be added/modified to allow these explicit connections from the downstream Proxy/Proxies.
Packet Captures and Policy Traces on Both Proxies might be needed to make sure what type of policies are needed. Please contact support if you have any issues or question