1 Introduction

This guide details the steps required to configure a load-balanced Clearswift Secure Web Gateway environment. It covers the configuration of the LoadMasters and any Clearswift Secure Web Gateway configuration changes that are required to enable load balancing.

The LoadMaster offers advanced Layer 4 and Layer 7 server load balancing, SSL Acceleration, and a multitude of other advanced Application Delivery and Optimization (ADC) features. The Kemp LoadMaster can load balance the Clearswift servers. The LoadMaster intelligently and efficiently distributes user traffic among the application servers so that users get the best experience possible.

This document provides guidance and recommended settings on how to load balance Clearswift servers with a Kemp LoadMaster. The Kemp Support Team is available to provide solutions for scenarios not explicitly defined.

2 Template

Kemp has developed a template containing our recommended settings for this workload. You can install this template to help create Virtual Services (VSs) because it automatically populates the settings. You can use the template to easily create the required VSs with the recommended settings. For some workloads, additional manual steps may be required such as assigning a certificate or applying port following, these steps are covered in the document, if needed.

You can remove templates after use and this will not affect deployed services. If needed, you can make changes to any of the VS settings after using the template.

Download released templates from the following page: LoadMaster Templates.

For more information and steps on how to import and use templates, refer to the Virtual Services and Templates, Feature Description on the Kemp Documentation page.

3 ClearSwift Virtual Service

You can configure the necessary Virtual Service in a number of ways; using the template, manually configuring the settings, or using the Application Programming Interface (API). Refer to the relevant section below for further details.

3.1 Create the Clearswift Web Gateway Virtual Service

This step-by-step set up of the Virtual Service (VS) leverages the Kemp application template for ClearSwift Web Gateway servers.

The table in each section outlines the settings configured by the application template. You can use this information to manually configure VS or use the Kemp LoadMaster API and automation tools.

To configure a VS using the application template, perform the following steps:

1. In the main menu of the LoadMaster WUI, go to Virtual Services > Add New.

2. Type a valid Virtual Address.

3. Select ClearSwift Web Gateway in the Use Template drop-down list.

4. Click Add this Virtual Service.

5. Expand the Real Servers section.

6. Click Add New.

7. Type the Real Server Address. (This is the Clearswift servers)

8. Confirm that port 8080 is entered.

9. Click Add This Real Server.

10. Repeat this step to add more Real Servers as needed.

3.1.1 ClearSwift Virtual Service Recommended API Settings (optional)

This table outlines the API parameters and values set using the Kemp application template. You can use these settings with scripts and automation tools.

API Parameter	API Value
port	8080
prot	tcp
Transparent	1
Persist	src
PersistTimeout	360
schedule	lc
idletime	3600
CheckType	tcp
CheckPort	8080

4 Server Side Modifications

Since we are using L7 transparency, we must ensure the return traffic from the servers go back to the LoadMaster to ensure a symmetrical flow of traffic. We will do this by changing the default gateway of each of the servers to point to the interface address on the network on the LoadMaster. This will normally be Eth0 or Eth1 depending on your configuration.

Clearswift Proxy Mode will be set to Standard Proxy Mode.

Last Updated Date

This document was last updated on 10 March 2022.