Table of Contents
Advertisement
S9700 Core Routing Switch
Configuration Guide - SPU
Figure 6-4 Typical networking of firewall load balancing
HostA
As shown in
responsible for distributing user requests to multiple firewalls. Load balancing devices are
classified into level-1 and level-2 load balancing devices. Level-1 devices load balance traffic
among firewalls, and level-2 devices ensure that traffic received through a firewall is sent back
through the same firewall. As shown in
Switch A is the level-1 device and Switch B is the level-2 device; if traffic is sent from Host B
to Host A, Switch B is the level-1 device and Switch A is the level-2 device. The firewall load
balancing process is as follows:
1.
2.
3.
4.
5.
6.
Depending on networking modes, firewalls are classified into standard firewalls and transparent
firewalls.
l
Issue 01 (2012-03-15)
IP
Network
Figure
6-4, Switch A and Switch B function as load balancing devices and are
Host A sends a request to Host B.
After receiving the request packet from Host A, Switch A selects a firewall, for example,
Firewall A, according to the load balancing algorithm and forwards the request packets to
Firewall A.
Firewall A forwards the request packet to Switch B.
As the level-2 device, Switch B records the firewall that forwards the request packet and
forwards the request packet to the destination (Host B).
After receiving the response packet from Host B, Switch B forwards the response packet
to Firewall A according to the record.
Firewall A forwards the response packet to Switch A and Switch A returns the received
response packet to Host A.
Each standard firewall, which is similar to a server, has an IP address. The standard firewall
can be detected by other devices on networks, as shown in
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
FirewallA
Switch
A
Firewall
B
Figure
6-4, if traffic is sent from Host A to Host B,
6 Load Balancing Configuration
SwitchB
IP
Network
Figure
6-5.
HostB
189
Advertisement
Table of Contents
