ProxySG & Advanced Secure Gateway

 View Only
  • 1.  2 ISP Link

    Posted Dec 06, 2017 10:12 PM
    Hi, We have 2 ISP link and we want to divert half half traffic from both the link through a proxy. How to achieve that


  • 2.  RE: 2 ISP Link
    Best Answer

    Posted Dec 06, 2017 10:41 PM

    Hi Aboo,

     

                     Proxy don't have an direct ISP link balancing capacity. If customer is terminating the ISP links on a Router which can do link routing based on source IP address, we can do a trick on proxy side to make this work. Steps below

     

    1) Add 2 extra VIPs in the Proxy from the same range as its Physical IP

    2) Add a reflect IP rule in the Forwarding layer by keeping half of the subnet to use VIP-1. Another rule to send traffic with the other VIP. Example below

    Lets take the entire customer subnet to be 10.1.2.0/24. Split this into 2 equal parts of 10.1.2.0/25 and 10.1.2.128/25.

    Forward Rules should be as below

    3) Now on the Router (or ISP Link terminator) add rule to use Link 1 when the source IP is seen as VIP1. Do the same rule for Link 2 when source is VIP2.

    Note: If router supports, do add a default rule in it to route all traffic through one link, if the other is found to be down.