Chapter 22 Virtual Servers
ZyWALL Series CLI Reference Guide
196
• The NAT rule sends this traffic to the HTTP server’s private IP address of 192.168.3.7 (defined in the
DMZ_HTTP object).
• HTTP traffic and the HTTP server in this example both use TCP port 80. So you set the port mapping
type to “port”, the protocol type to “TCP”, and the original and mapped ports to “80”.
3 Configure secure policy rule.
Create a firewall rule to allow HTTP traffic from the WAN zone to the DMZ web server.
Now the public can go to IP address 1.1.1.2 to access the HTTP server.
22.3 Virtual Server Load Balancing
Virtual Server Load balancing allows the Zyxel Device to distribute virtual server connection requests
between multiple real (physical) servers. This helps reduce each server’s workload and to decrease
virtual server response times.
22.3.1 Load Balancing Example 1
You are hosting a very popular website on your network, which attracts a lot of traffic and causes
problems with your web server. To resolve this, you set up three identical web servers on the DMZ behind
the Zyxel Device (Figure 21 on page 197). The Zyxel Device then distributes incoming requests between
the three servers. Clients only see one virtual web server with IP address 1.1.1.2.
Router(config)# ip virtual-server To-VirtualServer-WWW interface ge2
original-ip ge2_HTTP map-to DMZ_HTTP map-type port protocol tcp original-
port 80 mapped-port 80
Router(config)#
Router(config)# secure-policy insert 1
Router(secure-policy)# description To-VirtualServer-WWW
Router(secure-policy)# from WAN
Router(secure-policy)# to DMZ
Router(secure-policy)# destinationip DMZ_HTTP
Router(secure-policy)# service HTTP
Router(secure-policy)# exit
Router(config)# write
Router(config)#
To Next Page
Loading...
