Fortinet Document Library

Version:


Table of Contents

New Features

6.2.0
Download PDF
Copy Link

Auto Scaling

This version supports auto scaling for AliCloud or Aliyun environments.

Sample configuration

To set up auto scaling for a an AliCloud environment:

  1. Create a scaling group in AliCloud console.
  2. Create a scaling configuration in AliCloud console.
  3. Create scaling rules in AliCloud console.
  4. Set the first FortiGate VM in the auto scaling group as the master member.
  5. Scale out another FortiGate VM and set it as a slave member; and then synchronize configuration from master to slave.
To create a scaling group in AliCloud console:
  1. In AliCloud, go to Auto Scaling > Scaling Groups, click Create Scaling Group.
  2. Configure the scaling group parameters:

    Scaling Group Name

    Enter a name. In this example: FGT-ASG.

    Maximum Instances

    In this example: 4.

    Minimum Instances

    In this example: 1.

    Instance Configuration Source

    Use the default.

    Network Type

    Use the default of VPC.

    VPC ID

    Select the VPC ID.

    VSwitch

    Select the VSwitch.

To create a scaling configuration in AliCloud console:
  1. In the scaling group pop-up window, click Create Now to create a new scaling configuration.
  2. Select the Instance Type and FortiGate image.
  3. Select Assign Public IP and the Security Group.
  4. Click Next: System Configurations.

  5. If desired, select a Key Pair.
  6. Click Preview.

  7. If the configuration is correct, click Create and then click Enable Configuration.

  8. Check that the auto scaling group is created and the first FortiGate VM is launched automatically.

To create scaling rules in AliCloud console:
  1. In the Auto Scaling console Scaling Groups page, click FGT-ASG to edit it.
  2. In the left menu, click Scaling Rules.
  3. Configure the scaling rule parameters:

    Name

    Enter a scaling rule name. In this example: FGT-ASG-ADD1.

    Action

    Select the Action. In this example, 1.

    Cooldown Time

    In this example: 300 seconds.

The scaling rule FGT-ASG-ADD1 is created and it can be executed to add one FGT-ASG instance.

Use the same procedure to create another scaling rule named FGT-ASG-REMOVE1 to remove one FortiGate VM instance.

To set the first FortiGate VM in the auto scaling group as the master member:
  1. Log into the FortiGate VM as administrator.
  2. Use the CLI to enable auto scaling and set the role to master.
    config system auto-scale
        set status enable
        set role master
        set sync-interface "port1"
        set psksecret xxxxxx
    end
To scale out another FortiGate VM and set it as a slave member; and then synchronize configuration from master to slave:
  1. In the Auto Scaling console FGT-ASG scaling rules page, execute the scaling rule policy FGT-ASG-ADD1.

    A new FortiGate VM instance is created.

  2. Log into the new FortiGate VM as administrator and use the CLI to enable auto scaling and set the role to slave.

    For the master-ip, use the master side private IP address.

    config system auto-scale
        set status enable
        set role slave
        set sync-interface "port1"
        set master-ip 192.168.1.204
        set psksecret xxxxxx
    end
  3. Wait a few moments for the slave member to sync with the master member; and then the slave member can sync the FortiGate configuration from the master member.
    FortiGate-VM64-ALION~AND # diag deb app hasync -1
    slave's configuration is not in sync with master's, sequence:0
    slave's configuration is not in sync with master's, sequence:1
    slave's configuration is not in sync with master's, sequence:2
    slave's configuration is not in sync with master's, sequence:3
    slave's configuration is not in sync with master's, sequence:4
    slave starts to sync with master
    logout all admin users

Auto Scaling

This version supports auto scaling for AliCloud or Aliyun environments.

Sample configuration

To set up auto scaling for a an AliCloud environment:

  1. Create a scaling group in AliCloud console.
  2. Create a scaling configuration in AliCloud console.
  3. Create scaling rules in AliCloud console.
  4. Set the first FortiGate VM in the auto scaling group as the master member.
  5. Scale out another FortiGate VM and set it as a slave member; and then synchronize configuration from master to slave.
To create a scaling group in AliCloud console:
  1. In AliCloud, go to Auto Scaling > Scaling Groups, click Create Scaling Group.
  2. Configure the scaling group parameters:

    Scaling Group Name

    Enter a name. In this example: FGT-ASG.

    Maximum Instances

    In this example: 4.

    Minimum Instances

    In this example: 1.

    Instance Configuration Source

    Use the default.

    Network Type

    Use the default of VPC.

    VPC ID

    Select the VPC ID.

    VSwitch

    Select the VSwitch.

To create a scaling configuration in AliCloud console:
  1. In the scaling group pop-up window, click Create Now to create a new scaling configuration.
  2. Select the Instance Type and FortiGate image.
  3. Select Assign Public IP and the Security Group.
  4. Click Next: System Configurations.

  5. If desired, select a Key Pair.
  6. Click Preview.

  7. If the configuration is correct, click Create and then click Enable Configuration.

  8. Check that the auto scaling group is created and the first FortiGate VM is launched automatically.

To create scaling rules in AliCloud console:
  1. In the Auto Scaling console Scaling Groups page, click FGT-ASG to edit it.
  2. In the left menu, click Scaling Rules.
  3. Configure the scaling rule parameters:

    Name

    Enter a scaling rule name. In this example: FGT-ASG-ADD1.

    Action

    Select the Action. In this example, 1.

    Cooldown Time

    In this example: 300 seconds.

The scaling rule FGT-ASG-ADD1 is created and it can be executed to add one FGT-ASG instance.

Use the same procedure to create another scaling rule named FGT-ASG-REMOVE1 to remove one FortiGate VM instance.

To set the first FortiGate VM in the auto scaling group as the master member:
  1. Log into the FortiGate VM as administrator.
  2. Use the CLI to enable auto scaling and set the role to master.
    config system auto-scale
        set status enable
        set role master
        set sync-interface "port1"
        set psksecret xxxxxx
    end
To scale out another FortiGate VM and set it as a slave member; and then synchronize configuration from master to slave:
  1. In the Auto Scaling console FGT-ASG scaling rules page, execute the scaling rule policy FGT-ASG-ADD1.

    A new FortiGate VM instance is created.

  2. Log into the new FortiGate VM as administrator and use the CLI to enable auto scaling and set the role to slave.

    For the master-ip, use the master side private IP address.

    config system auto-scale
        set status enable
        set role slave
        set sync-interface "port1"
        set master-ip 192.168.1.204
        set psksecret xxxxxx
    end
  3. Wait a few moments for the slave member to sync with the master member; and then the slave member can sync the FortiGate configuration from the master member.
    FortiGate-VM64-ALION~AND # diag deb app hasync -1
    slave's configuration is not in sync with master's, sequence:0
    slave's configuration is not in sync with master's, sequence:1
    slave's configuration is not in sync with master's, sequence:2
    slave's configuration is not in sync with master's, sequence:3
    slave's configuration is not in sync with master's, sequence:4
    slave starts to sync with master
    logout all admin users