topic Re: Can someone describe the load balancing algorithm used for Aggregate links? in General Topics

Can someone describe the load balancing algorithm used for Aggregate links?

austad — Fri, 27 Apr 2012 16:29:15 GMT

Reading the documentation and forum posts, it doesn't appear that the PA is using LACP, therefore, it's not using one of the 3 common LACP load balancing algorithms.

Could someone describe how it's making the decision to send traffic down a particular link? Also, am I able to modify the behavior? (it doesn't seem like I can through the web interface).

Thanks!

Re: Can someone describe the load balancing algorithm used for Aggregate links?

rmonvon — Sat, 28 Apr 2012 15:32:16 GMT

Hi..You are correct and we don't support LACP at this time. We only support static link aggregation. To connect to other networking devices, simply set LAG to be static. Thanks.

Re: Can someone describe the load balancing algorithm used for Aggregate links?

mikand — Mon, 30 Apr 2012 00:22:53 GMT

So as of today PAN only use srcmac+dstmac as transmit hash?

Which gives that if you setup PA <- 2 cables -> switch <-> server only one of the cables will be used for traffic from PA to the server?

Would be great if this can be tweakable in future updates to at least involve a transmit hash such as srcip+srcport+dstip+dstport for added utilization of the available links in the aggregated group.

Re: Can someone describe the load balancing algorithm used for Aggregate links?

austad — Mon, 30 Apr 2012 14:58:23 GMT

Do you have an ETA on when LACP or L4 hashing will be implemented? I've had several clients bring up the issue.

Re: Can someone describe the load balancing algorithm used for Aggregate links?

rmonvon — Tue, 01 May 2012 16:51:27 GMT

Please check with your local Palo Alto SE for update on upcoming features. Thanks.

Re: Can someone describe the load balancing algorithm used for Aggregate links?

das — Fri, 01 Mar 2013 17:14:21 GMT

Is there more information on this? Suppose I have 4 ethernet interfaces in an aggregate group, when a frame hits the aggregate group software, how does the Palo choose which of the 4 interfaces the frame goes out of and what algorithm does it use. If it's static, does that mean it goes out all interfaces as a pseudo broadcast?

Re: Can someone describe the load balancing algorithm used for Aggregate links?

zarina — Fri, 01 Mar 2013 17:20:39 GMT

We use the session ID to select the port, and a simple IP modulo to load balance (so even session IDs to one port and odd to another if the LAG has 2 ports). The last 3 bits of session id is used to distribute the flows into the outbound port. i.e with 3 bits we could identify 8 unique ports(max ports we support in ae bundle).

Re: Can someone describe the load balancing algorithm used for Aggregate links?

das — Fri, 01 Mar 2013 17:44:41 GMT

If you have an 8 port LAG the sessions still go out 1 and 2 for odd and even? Or do they go in a round-robin fashion where the first odd session goes out port 1 and the next out port 3 and so on? After the session has established it's physical port it is then load-balanced by the last three bits based off IP modulo source IP?

Re: Can someone describe the load balancing algorithm used for Aggregate links?

kiwi — Thu, 10 Mar 2022 12:54:12 GMT

Just putting it out there that LACP has been supported for a while now:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClG8CAK

Cheers,

-Kiwi.