Auto Scaling

This version supports auto scaling for AliCloud or Aliyun environments.

Sample configuration

To set up auto scaling for a an AliCloud environment:

1. Create a scaling group in AliCloud console.
2. Create a scaling configuration in AliCloud console.
3. Create scaling rules in AliCloud console.
4. Set the first FortiGate VM in the auto scaling group as the primary member.
5. Scale out another FortiGate VM and set it as a secondary member; and then synchronize configuration from primary to secondary.

To create a scaling group in AliCloud console:

1. In AliCloud, go to Auto Scaling > Scaling Groups, click Create Scaling Group.
2. Configure the scaling group parameters:

   Scaling Group Name	Enter a name. In this example: FGT-ASG.
   Maximum Instances	In this example: 4.
   Minimum Instances	In this example: 1.
   Instance Configuration Source	Use the default.
   Network Type	Use the default of VPC.
   VPC ID	Select the VPC ID.
   VSwitch	Select the VSwitch.

   

To create a scaling configuration in AliCloud console:

1. In the scaling group pop-up window, click Create Now to create a new scaling configuration.
2. Select the Instance Type and FortiGate image.
3. Select Assign Public IP and the Security Group.
4. Click Next: System Configurations.

   

5. If desired, select a Key Pair.
6. Click Preview.

   

7. If the configuration is correct, click Create and then click Enable Configuration.

   

8. Check that the auto scaling group is created and the first FortiGate VM is launched automatically.

   

To create scaling rules in AliCloud console:

1. In the Auto Scaling console Scaling Groups page, click FGT-ASG to edit it.
2. In the left menu, click Scaling Rules.
3. Configure the scaling rule parameters:

   Name	Enter a scaling rule name. In this example: FGT-ASG-ADD1.
   Action	Select the Action. In this example, 1.
   Cooldown Time	In this example: 300 seconds.

   

The scaling rule FGT-ASG-ADD1 is created and it can be executed to add one FGT-ASG instance.

Use the same procedure to create another scaling rule named FGT-ASG-REMOVE1 to remove one FortiGate VM instance.

To set the first FortiGate VM in the auto scaling group as the primary member:

1. Log into the FortiGate VM as administrator.
2. Use the CLI to enable auto scaling and set the role to primary:

   config system auto-scale
       set status enable
       set role master
       set sync-interface "port1"
       set psksecret xxxxxx
   end

To scale out another FortiGate VM and set it as a secondary member; and then synchronize configuration from primary to secondary:

1. In the Auto Scaling console FGT-ASG scaling rules page, execute the scaling rule policy FGT-ASG-ADD1.

   A new FortiGate VM instance is created.

2. Log into the new FortiGate VM as administrator and use the CLI to enable auto scaling and set the role to secondary.

   For the master-ip, use the primary side private IP address.

   config system auto-scale
       set status enable
       set role slave
       set sync-interface "port1"
       set master-ip 192.168.1.204
       set psksecret xxxxxx
   end

3. Wait a few moments for the secondary member to sync with the primary member; and then the secondary member can sync the FortiGate configuration from the primary member.

   FortiGate-VM64-ALION~AND # diag deb app hasync -1
   slave's configuration is not in sync with master's, sequence:0
   slave's configuration is not in sync with master's, sequence:1
   slave's configuration is not in sync with master's, sequence:2
   slave's configuration is not in sync with master's, sequence:3
   slave's configuration is not in sync with master's, sequence:4
   slave starts to sync with master
   logout all admin users