Question Locked

Load balancer in DMZ

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We have a server farm and a load balancer which will be connected to internet. Servers with in server farms will also be load balancing among each other going via load balancer. So load balancer need to serve request from outside network and with in server farm. LB will be cisco ACE and firewall is 5510. Should LB have two interfaces/networks one connected in DMZ and other in server farm.?

3 replies

by robo_dev

if the servers being load balanced are the 'output' and the load balancer 'input' is the WAN connection via DMZ, then adding a load balancer 'input' on the server farm network would create a loop, no?

Or are you asking about providing local access to the load balancer via the DMZ?

by anurag.aggarwal

There is no WAN consideration here.
A firewall, server farm on one subnet 2nd subnet/vlan has Load balancer which is DMZ now outside user from internet will send request to LB. Servers in farm are also load balancing to each other so should i do load balancing acorss firewall or place one arm/port of Load balancer in server farm also. so one port of LB in server farm and another in DMZ. do it make sense and work. port in DMZ will receive request from outside/internet and port in server farm will do load balancing for server farm.

This discussion is closed to new replies.