Forum Discussion

farroar's avatar
farroar
Copper Contributor
Nov 10, 2023

NVA in HA (Load balancers in front and back). Need application to have 1:1 NAT and ingress/egress

I have a pair of firewalls in active/active with a load balancer sandwich. There is an application (specifically exchange type of device) that needs to egress and ingress on the same public IP address. Fairly standard stuff. Not sure how to incorporate this using two firewalls. 

 

First off, I don't think an app gateway will do the trick. I don't know if it will route reply traffic the same way it came in, thoughts? I'd like to terminate SSL at the edge before it gets to the firewalls for simplicity.

 

Thoughts?

1 Reply

  • farroar's avatar
    farroar
    Copper Contributor
    Nov 13, 2023
    Not much input in the forums here. But, for those that are running into similar issues it seems the gateway version of the load balancer is the way to go. Having a standard load balancer along with a gateway will allow a lot of flexibility with how traffic is routed.

Resources