Changing how UDP sessions are processed by the cluster

Go to Load Balance > Session > Setup > Session Setup to change how the cluster handles UDP sessions. UDP session setup can be set to remote or local.

On the CLI the configuration is:

config load-balance session-setup

set udp-ingress-setup disable

set udp-session-setup {local | remote}

end

• In local mode, UDP sessions are setup locally on the FortiController. All types of UDP traffic are supported by local mode.
• In remote mode, UDP sessions are setup on individual workers in the cluster. Remote mode results in better performance but some types of UDP traffic are not supported by remote mode.

Remote should work in most configurations, but for some configurations you may have to change the setting to local. For example, if the load distribution method is set to round-robin unidirectional UDP packets in a session may be distributed to different chassis slots. For some UDP protocols this will cause problems.

You should also enable local mode if the cluster processes non-symmetric UDP traffic no matter what the distribution method is.