Example For Configuring Standard Firewall Load Balancing - Huawei quidway s7700 Configuration Manual

Quidway S7700 Smart Routing Switch
Configuration Guide - SPU

6.6.6 Example for Configuring Standard Firewall Load Balancing

In this example, standard firewall load balancing is configured to improve the service processing
capability of the firewall.
Networking Requirements
As shown in
are the two SPUs on SwitchB). FWA and FWB constitute a firewall group to provide external
services. The IP address and VIP of the user are 20.20.20.3/24 and 3.3.3.3:80; the firewalls
whose IP addresses are 7.7.61.2/24 and 10.10.61.2/24 constitute a firewall group. The processing
capabilities of each firewall including the CPU usage, memory usage, and performance are
different. The requirements are as follows:
l
l
Issue 01 (2011-07-15)
rate-limit connection 400
rate-limit bandwidth inbound 400 threshold 80
rate-limit bandwidth outbound 400 threshold 80
#
load-balance member serverd
ip address 192.168.20.4
weight 20
conn-limit max 2000
rate-limit connection 200
rate-limit bandwidth inbound 200 threshold 80
rate-limit bandwidth outbound 200 threshold 80
#
load-balance group servergroup1
forward-mode dnat
member servera
backup-member serverc
inservice
member serverb
backup-member serverd
inservice
member serverc
inservice standby
member serverd
inservice standby
probe probe1
#
load-balance stickygroup stickygroup1 mask 24 destination-ip
group servergroup1
static client destination 20.20.20.2 member servera
#
load-balance action act1
stickygroup stickygroup1
#
load-balance l7classifier l7cls1 or
rule 1 match http url slbha[w|W](.*)
#
load-balance ip interface Eth-Trunk 0.2
#
load-balance l3classifier l3cls1
l7classifier l7cls1 action act1
nat outbound address-group 2
if-match acl 3000
#
load-balance policy lbp1
l3classifier l3cls1
#
return
Figure 6-13, the user accesses the server through FWA and FWB (FWA and FWB
The firewall with greater processing capabilities receives more service requests.
Any traffic received through one firewall is sent back through the same firewall.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Load Balancing Configuration
323