Proxies outgoing traffic distribution - Load balancing on outbound proxy IP address
Article ID: 254943
Updated On:
Products
Issue/Introduction
Proxy physical network interfaces are set with multiple (WAN) IPs addresses going toward the Internet and incoming (LAN) client connection requests should be balanced withing these (WAN) IPs.
Resolution
To instruct the Edge SWG balance the traffic on all available WAN IPs the load balancer that sits in front of the proxies can be leveraged together with "reflect_ip" proxy function in the "forward" layer.
The graphical representation of the data flow is:
Clients will always contact the load balancer on port 8080 (or current set explicit proxy port number) then in the load balancer same proxy but different (ports 8080, 8085, 8086, xyz (number of IPs to balance)) pool members should be created.
On the proxy, related services created to listen on the new ports matching the load balancer ones:
CPL policy to reflect available IPs corresponding to the proxy listening ports installed, example:
<forward>
proxy.port=8080 reflect_ip(10.0.80.80)
proxy.port=8085 reflect_ip(10.0.80.83)
proxy.port=8086 reflect_ip(10.0.80.84)
proxy.port=8087 reflect_ip(10.0.80.85)
Outbound connections are made as per above policy, balancing the traffic (can be verified in advanced URL "https://proxyIP/tcp/connections"):
Feedback
