topic Re: Destination NAT Round Robin for Load Balance Traffic for Web Server in General Topics

Destination NAT Round Robin for Load Balance Traffic for Web Server

JiaXiang — Wed, 09 Feb 2022 04:06:45 GMT

I have 3 web servers which have 3 different static ip.

.11.12.13 I follow below guide try to load balance the traffic for all 3 web servers.

Configure Destination NAT Using Dynamic IP Addresses (paloaltonetworks.com)

I already did those steps but instead of using FQDN, we use 3 IP address (192.168.x.11, .12 and .13). into an address group and put it into the translated packet as Dynamic IP (with session distribution) as round robin
session distribution method. With this done, we still see the traffic translated into only 1 IP address which is 192.168.x.11.

Re: Destination NAT Round Robin for Load Balance Traffic for Web Server

svrcina_jan — Wed, 09 Feb 2022 12:32:44 GMT

Could you please share a screenshot of your configuration? Are you trying to connect to 192.168.x.11 from a different host or at least private window?

Re: Destination NAT Round Robin for Load Balance Traffic for Web Server

JiaXiang — Thu, 10 Feb 2022 04:21:36 GMT

My NAT policy as below

Source Zone: WAN

Dst Zone:WAN

Dst Interface: Any

Source Addr:10.239.x. 3

Dst Addr: 10.250.x.3

Service:tcp_3333

translated packet

Src translation : none

Dst Translation:

Dynamic IP

Translated Address:

(webserver address group)

192.168.x.11, .12 and .13

Translated port:None

Session Distributed method: Round robin

Re: Destination NAT Round Robin for Load Balance Traffic for Web Server

JiaXiang — Thu, 10 Feb 2022 06:33:35 GMT

Re: Destination NAT Round Robin for Load Balance Traffic for Web Server

JiaXiang — Thu, 10 Feb 2022 07:37:46 GMT

The translated address is a address group inside have

192.168.x.11

192.168.x.12

192.168.x.13

Re: Destination NAT Round Robin for Load Balance Traffic for Web Server

svrcina_jan — Thu, 10 Feb 2022 08:41:25 GMT

The configuration seems to be correct, but the important question still is how do you access those servers? Do you already have random users accessing those servers and all of them are being sent to that one server? Based on those hitcounts, it appears that it is already in production, is that correct?

Re: Destination NAT Round Robin for Load Balance Traffic for Web Server

JiaXiang — Thu, 10 Feb 2022 09:08:13 GMT

The web server is in production so user just access it from browser but the traffic did not follow the round robin. If it follow round robin will cause asymmetric route ?

Re: Destination NAT Round Robin for Load Balance Traffic for Web Server

JiaXiang — Thu, 17 Feb 2022 02:07:22 GMT

Suddenly the traffic follow the round robin sequence flow. The issue is solve thank you.

Re: Destination NAT Round Robin for Load Balance Traffic for Web Server

CesarGonzalez — Mon, 28 Mar 2022 08:31:02 GMT

Please, could you share the solve?

Regards

Re: Destination NAT Round Robin for Load Balance Traffic for Web Server

JiaXiang — Mon, 28 Mar 2022 08:39:01 GMT

With the same configuration showing above suddenly the firewall is work as load balance.