topic Re: Cortex XDR VM Broker Cluster and External Load Balancer in Cortex XDR Discussions

Cortex XDR VM Broker Cluster and External Load Balancer

fppsglbl — Mon, 11 Dec 2023 19:00:52 GMT

Hi All,

I have 3 Broker VMs deployed in my Google Cloud project and I want to create a cluster from them. I also want to put a load balancer in front of the cluster as mentioned in the documentation "For "active/active" applets that require load balancing, you must install a Load Balancer in your network to distribute the incoming data between the nodes."

What kind of load balancer can be used in Google Cloud for the VM Broker Cluster? It has to work for the Local Agent and Windows Event Collector applets.

Anyone in here who can share details on a successful implementation of a load balancer for the VM Broker cluster?

Thanks

Re: Cortex XDR VM Broker Cluster and External Load Balancer

aspatil — Tue, 12 Dec 2023 10:56:43 GMT

Hello @fppsglbl ,

Thank you for writing to live community.

It's upto you which Load Balancer you have to choose on GCP. It will work with both the applets.

Kindly find the documentation below:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Configure-a-High-Availability-Cluster

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Activate-the-Local-Agent-Settings

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.

Re: Cortex XDR VM Broker Cluster and External Load Balancer

fppsglbl — Tue, 12 Dec 2023 15:51:44 GMT

Which one have you used? I've tried with Network passthrough and Application and none of those worked. Do you have a working example I can follow?

Re: Cortex XDR VM Broker Cluster and External Load Balancer

aspatil — Thu, 14 Dec 2023 12:06:55 GMT

Due to limited access, we cannot share much information here. If you have configured the correct instructions and if it is not working, then please open a TAC support case for further analysis.

Thanks.

Re: Cortex XDR VM Broker Cluster and External Load Balancer

fppsglbl — Thu, 14 Dec 2023 14:07:15 GMT

Thanks for the confirmation.