Method 3: Multiple VIPs
This method is similar to the multiple port groups method except instead of dedicating port number to each CS appliance it dedicates an individual VIP to each appliance in addition to the primary load balanced VIP. If you have 2 CS appliances then you would set up 3 VIPs. The primary Horizon protocol on HTTPS port 443 is load balanced to allocate the session to a specific CS appliance based on health check and load balance algorithms. The secondary connections would then be routed to the correct CS appliance based on the following FortiADC configuration table. In this method, you can select any Persistence as you need.
|
VIP:Port |
P/S |
Profile |
Name |
Real Servers |
|---|---|---|---|---|
|
10.107.1.86:443 |
Primary |
LB_PROFILE_TCP Or LB_PROFILE_HTTPS |
HORIZON_VS |
10.107.10.80:443 10.107.10.81:443 |
|
10.107.1.87:443, 4172, 8443 |
Secondary |
LB_PROFILE_TCP |
CS01_VS_TCP |
10.107.10.80:0 |
|
10.107.1.87:4172, 8443 |
Secondary |
LB_PROFILE_UDP |
CS01_VS_UDP |
10.107.10.80:0 |
|
10.107.1.88:443, 4172, 8443 |
Secondary |
LB_PROFILE_TCP |
CS02_VS_TCP |
10.107.10.81:0 |
|
10.107.1.88:4172, 8443 |
Secondary |
LB_PROFILE_UDP |
CS02_VS_UDP |
10.107.10.81:0 |
In this example, the FQDN https:// cs1.fortihorizon.com resolves to 10.107.1.87 and https://cs2.fortihorizon.com resolves to 10.107.1.88.
|
CS Appliance |
Configuration Item |
Value |
|---|---|---|
|
CS01 |
tunnelExternalURL |
https://cs1.fortihorizon.com:443 |
|
blastExternalURL |
https://cs1.fortihorizon.com:8443 |
|
|
pcoipExternalURL |
10.107.1.87:4172 |
|
|
CS02 |
tunnelExternalURL |
https://cs2.fortihorizon.com:443 |
|
blastExternalURL |
https://cs2.fortihorizon.com:8443 |
|
|
pcoipExternalURL |
10.107.1.88:4172 |
config load-balance virtual-server
edit "CS87_TCP"
set interface port5
set ip 10.107.1.87
set port 443 4172 8443
set load-balance-profile LB_PROF_TCP
set load-balance-method LB_METHOD_ROUND_ROBIN
set load-balance-pool CS1_PORT_0
set traffic-group default
next
end
config load-balance virtual-server
edit "CS87_UDP"
set interface port5
set ip 10.107.1.87
set port 4172 8443
set load-balance-profile LB_PROF_UDP
set load-balance-method LB_METHOD_ROUND_ROBIN
set load-balance-pool CS1_PORT_0
set traffic-group default
next
end
config load-balance virtual-server
edit "CS88_TCP"
set interface port5
set ip 10.107.1.88
set port 443 4172 8443
set load-balance-profile LB_PROF_TCP
set load-balance-method LB_METHOD_ROUND_ROBIN
set load-balance-pool CS2_PORT_0
set traffic-group default
next
end
config load-balance virtual-server
edit "CS88_UDP"
set interface port5
set ip 10.107.1.88
set port 4172 8443
set load-balance-profile LB_PROF_UDP
set load-balance-method LB_METHOD_ROUND_ROBIN
set load-balance-pool CS2_PORT_0
set traffic-group default
next
end