1. Kemp Support
2. Knowledge Base
3. Routing and Switching

Network deployment options on the KEMP LoadMaster

Updated: July 14, 2023 20:26

There are two deployment options; one-arm and two-arm. The distinction is made on a per-Virtual Service basis. The LoadMaster can house a combination of one-arm and two-arm Virtual Services. In fact, the LoadMaster can have a Virtual Service that is configured in both methods.

One-Arm Deployment

• The load balancer has one physical network card connected to one subnet
• A Single Ethernet port (eth0) is used for both inbound and outbound traffic
• Real Servers and Virtual Services will be part of the same logical network - sometimes called flat-based - this implies that both have public IP addresses if used for services within the Internet
• Server NAT does not make sense for one-armed configurations
• Does not automatically imply the use of Direct Server Return (DSR) methods on the Real Servers
• IP address transparency will function properly if clients are located on the same logical network as the LoadMaster in a DSR configuration. IP address transparency is not supported when clients are located on the same logical network as the LoadMaster in a NAT configuration.

The one armed solution can be set-up in both a single and Highly Available (HA) configuration.

 

 Two-Arm Deployment

• The load balancer has two network interfaces connected to two subnets - this may be achieved by using two physical network cards or by creating VLANs on a single network interface
• Virtual Services and Real Servers are on different subnets

 

In the example diagram above, the system has been configured as follows:

• A Virtual Service has been created on the LoadMaster with an IP address of 66.220.13.66 for an HTTP service
• The Virtual Service has been configured to balance the incoming traffic across the Real Servers (server 1, 2 and 3)
• A user requests the URL http://www.kemptechnologies.com
• The URL will be resolved by the DNS into IP address 66.220.13.66
• The request will be routed to the LoadMaster, which offers this IP address as an IP-alias of its network interface eth0
• The LoadMaster is connected to the server farm subnet 10.0.0.0 via its network interface eth1
• The LoadMaster knows that there are three Real Servers in this subnet that are assigned to the requested address 66.220.13.66 and are able to deliver the required content
• The LoadMaster uses the load balancing method configured, for example weighted round robin, to send the request on to one of the three Real Servers
• Other items to note regarding the two-armed configuration are:
• Both eth0 (net side) and eth1 (farm side) interfaces are used. Additional ports go to the farm side for multi-armed configurations
• Implies that the LoadMaster (eth0) and server farm(s) are on separate logical networks, sometimes referred to as a NAT-based topology
• The server farm(s) may make use of non-routable (RFC1918) IP addresses
• Server NAT may be useful in such a configuration
• IP address transparency will function properly if clients are located on the same logical network as the LoadMaster in both NAT (common) and DSR (uncommon) configurations.
• Virtual Services may be created on any of the Ethernet interfaces.
• Real Servers may exist on either the eth0 or up to the ethX network. However, placing Real Server on eth0 in a two-armed configuration is not recommended.

Leveraging one port and configuring the “Additional Subnet” feature qualifies as two-armed.

---

Comments

---

---

---