D-Link DFL-2500 User Manual
266
Chapter 24. Server Load Balancing (SLB)
24.2.4
Packets Flow by SAT
In D-Link firewalls, load-balancing enabled SAT rule is used to translate
packets exchanged between a client and real servers. When a new
connection is being opened, the SAT rule is triggered; it translates the
public server farm IP address to a real server address. Necessary
modification to the packets is performed by the underlying system
determined by NAT or Allow rule.
packets exchanged between a client and real servers. When a new
connection is being opened, the SAT rule is triggered; it translates the
public server farm IP address to a real server address. Necessary
modification to the packets is performed by the underlying system
determined by NAT or Allow rule.
24.3
Scenario: Enabling SLB
The main configuration steps necessary for enabling SLB function in
D-Link firewalls are outlined as follows:
D-Link firewalls are outlined as follows:
•
Specifying a Server Farm – Define a group of servers as a server
farm by selecting the objects with correct IP.
farm by selecting the objects with correct IP.
•
Specifying the load-balancing enabled SAT rule – Configure a
SAT rule with filtering fields for the firewall to match the traffic flow
and trigger the SLB .
SAT rule with filtering fields for the firewall to match the traffic flow
and trigger the SLB .
•
Specifying Distribution Mode & Algorithm – Provide the
distribution policies the firewall should use.
distribution policies the firewall should use.
Example:
SLB Configuration
Figure 24.2: A SLB Scenario
D-Link Firewalls User’s Guide