F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices High Availability Configuration Guide-6PW100

188
• Virtual service—A logical entity that faces users. For server load balancing and firewall load
balancing, a virtual service corresponds to one real service group.
Server load balancing operates in the following way:
1. After a user sends a request to the virtual service of the LB device, if a persistence method is
specified in the virtual service, and matched persistence entries exist, the request is distributed
according to the persistence entries. Otherwise, the virtual service obtains the information of the
related real service group, and then continues the following procedure. For more information
about persistence methods, see
623H4.
2. Real services are matched against ACL rules specified in the real services one by one according
to the weights of the real services. Requests allowed by the ACL are distributed to the
corresponding real service; if requests are not allowed by the ACL or no matched real services
exist, the following procedure is continued.
3. Distributes the request to a real service in the group based on the algorithm configured in the real
service group.
192BRecommended configuration procedure
NOTE:
For an LB device configured with DR-mode server load balancing, you must select Firewall > Session
Table > Configuration from the navigation tree to enable unidirectional traffic detection. For more
information, see
Access Control Configuration Guide .
Ste
p
Remarks
6. Saving of the last hop information
Saving of the last hop information must be enabled on a level
2 LB device in firewall load balancing. This task is optional in
other cases.
For more information, see "
624H
Configuring public parameters."
7. 625HConfiguring a health monitoring method
A health monitoring method must be configured if you adopt
SSL health monitoring. This task is optional in other cases.
8. 626HCreating a real service group
Required.
IMPORTANT:
The maximum number of real
service groups, real services, and
virtual services depends on the
resource configuration of the virtual
device. For more information, see
System Management and
Maintenance Configuration Guide
.
9. 627HCreating a real service Required.
10. 628HCreating a virtual service for server load
balancing
Required.
To implement server load balancing, enable virtual fragment reassembly on the zone to which the
interfaces that process LB packets belong. For more information, see "Managing sessions."
To implement forced load balancing of server load balancing, enable virtual fragment reassembly on the
zone to which the interfaces that process LB packets belong. For more information, see "Managing
sessions."