Unlock Exclusive Benefits
Join Our Community Today!
Join our Community and post in the forum to earn your exclusive badge; celebrating 3 years of the Fortinet Community!
LOGIN/REGISTER
CONTINUE AS A GUEST
- Forums
- Knowledge Base
- Customer Service
- Internal Article Nominations
- FortiGate
- FortiClient
- FortiAP
- FortiAnalyzer
- FortiADC
- FortiAuthenticator
- FortiBridge
- FortiCache
- FortiCarrier
- FortiCASB
- FortiConnect
- FortiConverter
- FortiCNP
- FortiDAST
- FortiDDoS
- FortiDB
- FortiDNS
- FortiDLP
- FortiDevSec
- FortiDeceptor
- FortiDirector
- FortiEDR
- FortiExtender
- FortiGate Cloud
- FortiHypervisor
- FortiGuard
- FortiInsight
- FortiIsolator
- FortiMail
- FortiMonitor
- FortiManager
- FortiNAC
- FortiNAC-F
- FortiNDR (on-premise)
- FortiNDRCloud
- FortiPAM
- FortiPhish
- FortiPortal
- FortiProxy
- FortiRecon
- FortiRecorder
- FortiSRA
- FortiSandbox
- FortiSASE
- FortiScan
- FortiSIEM
- FortiSOAR
- FortiSwitch
- FortiTester
- FortiToken
- FortiVoice
- FortiWAN
- FortiWeb
- FortiWebCloud
- Lacework
- Wireless Controller
- RMA Information and Announcements
- FortiCloud Products
- ZTNA
- 4D Documents
- Customer Service
- Community Groups
- Blogs
FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
- Fortinet Community
- Knowledge Base
- FortiGate
- Technical Tip: The difference between the load-bal...
Options
- Subscribe to RSS Feed
- Mark as New
- Mark as Read
- Bookmark
- Subscribe
- Printer Friendly Page
- Report Inappropriate Content
| Description | This article highlights the differences in the load-balancing algorithms used when Load balancing is enabled on the SD-WAN rule. This option is also known as Maximize bandwidth (SLA) in FortiOS v7.4.0 and older. |
| Scope |
FortiGate is configured with SDWAN and two or more internet links. |
| Solution |
The below example shows the difference between two load-balancing algorithms round-robin (default) and inbandwidth. With round-robin load-balancing, sessions will be distributed evenly across the selected SD-WAN members in a sequential manner (i.e. 1>2>3>1>2>3). With inbandwidth load-balancing, the FortiGate will consider the available bandwidth based on the configured estimated-downstream-bandwidth on the SD-WAN member and the current utilization. The interface with the most available download bandwidth will be selected as the best interface.
Round-robin configuration:
config system sdwan config service edit 100 set mode load-balance <----- On v7.4.0 or older. set load-balance enable<----- On v7.4.1 or newer. set hash-mode round-robin set priority-members 1 2 next end end
Round-robin SD-WAN debug:
FGT-B1 # diagnose sys sdwan service 100
Service(100): Address Mode(IPV4) flags=0x24200 use-shortcut-sla use-shortcut Tie break: cfg Shortcut priority: 2 Gen(4), TOS(0x0/0x0), Protocol(0): src(1->65535):dst(1->65535), Mode(sla hash-mode=round-robin) 1: Seq_num(2 port10 Underlay), alive, sla(0x1), gid(2), num of pass(1), selected Src address(1): 0.0.0.0-255.255.255.255 Dst address(1): 0.0.0.0-255.255.255.255
Round-robin packet capture:
Inbandwidth configuration:
config system sdwan config service edit 100 set mode load-balance <----- On v7.4.0 or older. set load-balance enable <----- On v7.4.1 or newer. set hash-mode inbandwidth set priority-members 1 2 next end end config system interface edit port9 set estimated-downstream-bandwidth 100000<----- 100 Mbps. next edit port10 set estimated-downstream-bandwidth 100000 next end
Inbandwidth SD-WAN debug:
FGT-1 # diagnose sys sdwan service 100
Service(100): Address Mode(IPV4) flags=0x24200 use-shortcut-sla use-shortcut Tie break: cfg Gen(1), TOS(0x0/0x0), Protocol(0): src(1->65535):dst(1->65535), Mode(sla hash-mode=inbandwidth) 1: Seq_num(2 port10 Underlay), alive, sla(0x1), gid(2), num of pass(1), inbandwidth: 99920Kbps, selected Src address(1): 0.0.0.0-255.255.255.255 Dst address(1): 0.0.0.0-255.255.255.255
Inbandwidth packet capture:
|
Broad. Integrated. Automated.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Security Research
Company
News & Articles
Copyright 2024 Fortinet, Inc. All Rights Reserved.