Chapter 23 - Firewall Load Balancing; Firewall Overview - Radware Alteon Application Manual

Chapter 23 – Firewall Load Balancing
Firewall Load Balancing (FWLB) with Alteon allows multiple active firewalls to operate in parallel.
Parallel operation enables users to maximize firewall productivity, scale firewall performance without
forklift upgrades, and eliminate the firewall as a single point-of-failure.
This chapter discusses the following topics:
• Firewall Overview, page
supported by Alteon.
• Basic FWLB, page 658—Explanation and example configuration for FWLB in simple networks,
using two parallel firewalls and two Alteons. The basic FWLB method combines redirection filters
and static routing for FWLB.
• Four-Subnet FWLB, page
scale, high-availability network with redundant firewalls and Alteons. This method combines
redirection filters, static routing, and Virtual Router Redundancy Protocol (VRRP).
• Advanced FWLB Concepts, page 683
— Free-Metric FWLB, page
enabling the transparent load balancing (rtsrcmac) option.
— Adding a Demilitarized Zone (DMZ), page
Alteon between the Internet and the firewalls.
— Firewall Health Checks, page
FWLB.

Firewall Overview

Firewall devices have become indispensable for protecting network resources from unauthorized
access. Without FWLB, firewalls can become critical bottlenecks or single points-of-failure for your
network. As an example, consider the network in
page 657:
Figure 106: Firewall Configuration with FWLB
Document ID: RDWR-ALOS-V2900_AG1302
657—An overview of firewalls and the various FWLB solutions
668—Explanation and example configuration for FWLB in a large-
683—Using other load-balancing metrics (besides hash) by
686—Adding a DMZ for servers that attach to
687—Methods for fine-tuning the health checks performed for
Figure 106 - Firewall Configuration with FWLB,
657