How to configure many ProxySG to allow clients to use PAC file with Load Balancer in between

Products

• ASG-S200

Issue/Introduction

End clients are not getting PAC file or they are unable to connect to the Internet

Environment

• At least 2 Proxies running SGOS 6.7 or higher
• Proxies are not in HA mode, they are standalone
• Load Balancer is used to balance the traffic from the clients across available Proxies

 

Cause

Proper configuration is required to enable Proxies to properly respond to the PAC requests coming from many clients when Load Balancer is in use.

Resolution

The following CPL code should be added to all Proxies (Proxy1, Proxy2, ..., ProxyN)

; Proxy 1, Proxy 2, ..., Proxy N configuration for PAC file with load balancer
; <LB_ip_egress_port> is the LB IP address used to connect to Proxies
; <LB_ip_ingress_port> is the LB IP address used by the clients to connect to to get PAC file
; <proxyN_ip_address> is the IP address of ProxyN, unique for each Proxy

<Proxy>

    client.address=<LB_ip_egress_port> proxy.address=<proxy1_ip_address> url="<LB_ip_ingress>/accelerated_pac_base.pac" action.ReturnRedirectProxy1(yes)
    client.address=<LB_ip_egress_port> proxy.address=<proxy2_ip_address> url="<LB_ip_ingress>/accelerated_pac_base.pac" action.ReturnRedirectProxy2(yes)
...
    client.address=<LB_ip_egress_port> proxy.address=<proxyN_ip_address> url="<LB_ip_ingress>/accelerated_pac_base.pac" action.ReturnRedirectProxyN(yes)

define action ReturnRedirectProxy1
  request_redirect( 302, ".*", "http://<proxy1_ip_address>/accelerated_pac_base.pac" )
end

define action ReturnRedirectProxy2
  request_redirect( 302, ".*", "http://<proxy2_ip_address>/accelerated_pac_base.pac" )
end

...
...
...

define action ReturnRedirectProxyN
  request_redirect( 302, ".*", "http://<proxyN_ip_address>/accelerated_pac_base.pac" )
end