I am looking for a solution where traffic from multiple 10G links (Say 8 links) can be received using TAPs, aggregated and than load balanced to say 8x10Gbps ports connected to 8 Monitoring servers running sniffer based application. The load balancing should based on sessions (flows) so that on each server can receive up to 5 Gbps of traffic of same sessions.
I explored two options to achieve it but I do not whether it will be achievable.
Option1: Using SPAN port receive the traffic from all input Source ports and than send it to a Etherchannel or Port Channel comprising 8 ports. Once the traffic is available to EtherChannel it can load balance to all member ports based on the defined criteria using global command.
Option2: Using VACL receive the traffic from all input ports (Keeping them in one VLAN) and redirect the traffic to a Port Channel.
Can someone with prior experience suggest the best way to achieve it and How?
Thanks
