I know this isn't really a question for PaloAlto but I was hoping I might get some insight from the community.
We are looking at acquiring a second circuit from a different ISP for a backup failover, not load balancing. I have been studying SRV records for prioritizing which circuits IP addresses remote users should use. It appears that SRV records don't yet work with HTTP. case in point is this blog https://stackoverflow.com/questions/9063378/why-do-browsers-not-use-srv-records.
Has anyone here been through this before and can provide some insight in a best practice for this setup?
I think in this case you might be better off using something like an external load balancer. This way you can send traffic down the one path unless it is unavailable then it would send traffic down the secondary path. You could do it with DNS if you set your TTL's super low and do fail overs manually, but there will be downtime.
Hope that helps.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!