What's new
FortiADC 7.2.7 offers the following new features and enhancements:
Hardware support for HA Active-Active-VRRP Unicast and Broadcast
This enhancement has extended the HA functionality in FortiADC hardware configurations to include both Unicast and Broadcast heartbeat types in Active-Active-VRRP mode; whereas previously, hardware HA only supported the Multicast heartbeat type by default in Active-Active-VRRP mode.
SSL Session ID persistency support in Layer 7 TCP via Lua scripting
FortiADC now supports SSL Session ID persistency without decrypting the traffic in Layer 7 TCP. This is implemented through the new Lua stream scripting function LB:set_peer(ip, port) which allows you to select a real server with a specific IP and port in STREAM_REQUEST_DATA events.
when STREAM_REQUEST_DATA { LB:set_peer("10.0.0.1","443") }
Name | Description |
---|---|
ip |
A real server IP address. Note: Only the IP address in a real server from the regular pool can be used here; it cannot use a real server from the schedule pool. If a real server is not specified, then FortiADC will select a real server by using the specified load-balancing method. |
port |
A real server port. Note: Only the port in a real server from the regular pool can be used here; it cannot use a real server from the schedule pool. If a real server is not specified, then FortiADC will select a real server by using the specified load-balancing. |