Fortinet white logo
Fortinet white logo

Handbook

Chapter 1: What's New

What's new

FortiADC 7.2.7 offers the following new features and enhancements:

Hardware support for HA Active-Active-VRRP Unicast and Broadcast

This enhancement has extended the HA functionality in FortiADC hardware configurations to include both Unicast and Broadcast heartbeat types in Active-Active-VRRP mode; whereas previously, hardware HA only supported the Multicast heartbeat type by default in Active-Active-VRRP mode.

SSL Session ID persistency support in Layer 7 TCP via Lua scripting

FortiADC now supports SSL Session ID persistency without decrypting the traffic in Layer 7 TCP. This is implemented through the new Lua stream scripting function LB:set_peer(ip, port) which allows you to select a real server with a specific IP and port in STREAM_REQUEST_DATA events.

when STREAM_REQUEST_DATA { 
    LB:set_peer("10.0.0.1","443")
}
Name Description

ip

A real server IP address.

Note: Only the IP address in a real server from the regular pool can be used here; it cannot use a real server from the schedule pool. If a real server is not specified, then FortiADC will select a real server by using the specified load-balancing method.

port

A real server port.

Note: Only the port in a real server from the regular pool can be used here; it cannot use a real server from the schedule pool. If a real server is not specified, then FortiADC will select a real server by using the specified load-balancing.

Chapter 1: What's New

What's new

FortiADC 7.2.7 offers the following new features and enhancements:

Hardware support for HA Active-Active-VRRP Unicast and Broadcast

This enhancement has extended the HA functionality in FortiADC hardware configurations to include both Unicast and Broadcast heartbeat types in Active-Active-VRRP mode; whereas previously, hardware HA only supported the Multicast heartbeat type by default in Active-Active-VRRP mode.

SSL Session ID persistency support in Layer 7 TCP via Lua scripting

FortiADC now supports SSL Session ID persistency without decrypting the traffic in Layer 7 TCP. This is implemented through the new Lua stream scripting function LB:set_peer(ip, port) which allows you to select a real server with a specific IP and port in STREAM_REQUEST_DATA events.

when STREAM_REQUEST_DATA { 
    LB:set_peer("10.0.0.1","443")
}
Name Description

ip

A real server IP address.

Note: Only the IP address in a real server from the regular pool can be used here; it cannot use a real server from the schedule pool. If a real server is not specified, then FortiADC will select a real server by using the specified load-balancing method.

port

A real server port.

Note: Only the port in a real server from the regular pool can be used here; it cannot use a real server from the schedule pool. If a real server is not specified, then FortiADC will select a real server by using the specified load-balancing.