Load balancing and flow rules
This chapter provides an overview of how FortiGate-7000E Session-Aware Load Balancing (SLBC) works and then breaks down the details and explains why you might want to change some load balancing settings.
FortiGate-7000E SLBC works as follows.
-
The FortiGate-7000E directs all traffic that does not match a load balancing flow rule to the DP2 processors.
If a session matches a flow rule, the session skips the DP2 processors and is directed according to the action setting of the flow rule. Default flow rules send traffic that can't be load balanced to the primary (master) FPM. See Default configuration for traffic that cannot be load balanced.
-
The DP2 processors load balance TCP, UDP, SCTP, and IPv4 ICMP sessions among the FPMs according to the load balancing method set by the
dp-load-distribution-method
option of theconfig load-balance setting
command.The DP2 processors load balance ICMP sessions among FPMs according to the load balancing method set by the
dp-icmp-distribution-method
option of theconfig load-balance setting
command. See ICMP load balancing. - The DP2 processors send other sessions that cannot be load balanced to the primary (or master) FPM.