Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Load Balancing behind firewall

Hi,

Can load balancing be done behind a firewall with CSS. For e.g. CSS (on the outside of the firewall) load balances on the servers connected to the DMZ of the firewall.

If so, should there be any performance issues. And what if the firewall had IPS functionality as well.

Regards.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Load Balancing behind firewall

It can be done. You need to make sure

1. Holes are punched in the Firewall form probe traffic (CSS -> Servers)

2. Return traffic from the servers should not Bypass the CSS. (Firewall should handover the responses from servers back to CSS). You can use source nat on CSS for this purpose.

Thanks

Syed Iftekhar Ahmed

1 REPLY

Re: Load Balancing behind firewall

It can be done. You need to make sure

1. Holes are punched in the Firewall form probe traffic (CSS -> Servers)

2. Return traffic from the servers should not Bypass the CSS. (Firewall should handover the responses from servers back to CSS). You can use source nat on CSS for this purpose.

Thanks

Syed Iftekhar Ahmed

139
Views
0
Helpful
1
Replies
CreatePlease to create content