Fortinet black logo

CLI Reference

web-proxy forward-server-group

web-proxy forward-server-group

Use this command to configure a load-balanced group of web proxy forward servers.

config web-proxy forward-server-group
    edit {name}
    # Configure a forward server group consisting or multiple forward servers. Supports failover and load balancing.
        set name {string}   Configure a forward server group consisting one or multiple forward servers. Supports failover and load balancing. size[63]
        set affinity {enable | disable}   Enable/disable affinity, attaching a source-ip's traffic to the assigned forwarding server until the forward-server-affinity-timeout is reached (under web-proxy global).
        set ldb-method {weighted | least-session}   Load balance method: weighted or least-session.
                weighted       Load balance traffic to forward servers based on assigned weights.
                least-session  Send new sessions to the server with lowest session count.
        set group-down-option {block | pass}   Action to take when all of the servers in the forward server group are down: block sessions until at least one server is back up or pass sessions to their destination.
                block  Block sessions until at least one server in the group is back up.
                pass   Pass sessions to their destination bypassing servers in the forward server group.
        config server-list
            edit {name}
            # Add web forward servers to a list to form a server group. Optionally assign weights to each server.
                set name {string}   Forward server name. size[63] - datasource(s): web-proxy.forward-server.name
                set weight {integer}   Optionally assign a weight of the forwarding server for weighted load balancing (1 - 100, default = 10) range[1-100]
            next
    next
end

Additional information

The following section is for those options that require additional explanation.

config server-list

A configuration method to determine the load balancing weight for web proxy forwarding servers.

Note: You can only create entries if a web proxy forwarding server has already been created on the FortiGate. To do so, go to Network > Explicit Proxy > Web Proxy Forwarding Servers and select Create New.

weight <weight>

Weight (or ratio) of this server for load balancing. Set the value between 1-100. The default is set to 10.

affinity {enable | disable}

Enable (by default) or disable attaching source-ip's traffic to assigned forward-server until the forward-server-affinity-timeout is reached (see web-proxy global).

ldb-method {weighted | least-session}

Load-balancing method:

  • weighted: Distribute to server based on weight (set by default).
  • least-session: Distribute to server with lowest session count.

group-down-option {block | pass}

Action to take if all forward servers are down:

  • block: Blocks traffic (set by default).
  • pass: Passes traffic through.

web-proxy forward-server-group

Use this command to configure a load-balanced group of web proxy forward servers.

config web-proxy forward-server-group
    edit {name}
    # Configure a forward server group consisting or multiple forward servers. Supports failover and load balancing.
        set name {string}   Configure a forward server group consisting one or multiple forward servers. Supports failover and load balancing. size[63]
        set affinity {enable | disable}   Enable/disable affinity, attaching a source-ip's traffic to the assigned forwarding server until the forward-server-affinity-timeout is reached (under web-proxy global).
        set ldb-method {weighted | least-session}   Load balance method: weighted or least-session.
                weighted       Load balance traffic to forward servers based on assigned weights.
                least-session  Send new sessions to the server with lowest session count.
        set group-down-option {block | pass}   Action to take when all of the servers in the forward server group are down: block sessions until at least one server is back up or pass sessions to their destination.
                block  Block sessions until at least one server in the group is back up.
                pass   Pass sessions to their destination bypassing servers in the forward server group.
        config server-list
            edit {name}
            # Add web forward servers to a list to form a server group. Optionally assign weights to each server.
                set name {string}   Forward server name. size[63] - datasource(s): web-proxy.forward-server.name
                set weight {integer}   Optionally assign a weight of the forwarding server for weighted load balancing (1 - 100, default = 10) range[1-100]
            next
    next
end

Additional information

The following section is for those options that require additional explanation.

config server-list

A configuration method to determine the load balancing weight for web proxy forwarding servers.

Note: You can only create entries if a web proxy forwarding server has already been created on the FortiGate. To do so, go to Network > Explicit Proxy > Web Proxy Forwarding Servers and select Create New.

weight <weight>

Weight (or ratio) of this server for load balancing. Set the value between 1-100. The default is set to 10.

affinity {enable | disable}

Enable (by default) or disable attaching source-ip's traffic to assigned forward-server until the forward-server-affinity-timeout is reached (see web-proxy global).

ldb-method {weighted | least-session}

Load-balancing method:

  • weighted: Distribute to server based on weight (set by default).
  • least-session: Distribute to server with lowest session count.

group-down-option {block | pass}

Action to take if all forward servers are down:

  • block: Blocks traffic (set by default).
  • pass: Passes traffic through.