Part Iv Clustering The High Bandwidth Ssl Vpn Servers - Novell ACCESS MANAGER 3.1 SP1 - SSL VPN SERVER GUIDE 03-17-2010 Manual

Clustering the High Bandwidth
I V
SSL VPN Servers
The high bandwidth SSL VPN servers can now be clustered to provide load balancing and fault
tolerance capabilities and act as a single server. Clients access the virtual IP address of the cluster
presented on the L4 switch, and the L4 switch alleviates server load by balancing traffic across the
cluster. Whenever a user accesses the virtual IP address (port 8080) assigned to the L4, the system
routes the user to one of the SSL VPN servers in the cluster, as traffic necessitates.
Clustering enables the following features:
Cluster configuration is synchronized to all members of the cluster.
Each cluster member can handle sessions held by another server in the cluster. After a session
is established, the same member usually handles all requests for that session. However, if that
cluster member is not available to handle a request, another member processes the request.
Load balancing among the cluster members.
Transparent failover.
This section has the following information:
Chapter 20, "Overview of SSL VPN Clusters," on page 123
Chapter 21, "Creating a Cluster of SSL VPN Servers," on page 125
Chapter 22, "Clustering SSL VPN by Using L4," on page 129
Chapter 23, "Clustering SSL VPNs By Using Access Gateway and Without L4," on page 133
Chapter 24, "Configuring SSL VPN to Monitor Health of Cluster," on page 135
Clustering the High Bandwidth SSL VPN Servers
IV
121