Advantages of Layer 7 Load Balancing

Layer 7 Load Balancing

One of the great things about late-model load balancing hardware is the ability to balance on data from the application layer (layer 7 of the OSI model). Traditional load balancers balance traffic based on the virtual IP that was assigned to a cluster. Requests sent to the virtual IP are routed to a destination based on the algorithm used on the nodes in that cluster. With layer 7 load balancing, specific information within the request itself can be used to balance the request to the appropriate destination.

INetU used this technology primarily on our Cisco ACE 4710 load balancers. This dedicated network appliance is capable of various layer 7 functions, ranging from simple keyword or response code health probes to full-fledged layer 7 load balancing. A common example of request-based decision making is static content hosting. Images, style sheets, scripts and so on may be served up by a content delivery network that is standalone from an application platform. To implement this, we can simply create a classification on the load balancers as follows:

class-map type http loadbalance match-any PICS
3 match http url /*.jpg
4 match http url /*.png

When the above is assigned to a policy map in a config, any traffic that matches the pattern will divert it to a serverfarm unique to that traffic. Any traffic not matching will be routed along the standard path to one of the many application server nodes it resolves to based on the conventional distribution algorithm.

Read the full post »

Security in Layers: Web Application Firewall

First and foremost, it is important for you to be able to tell the difference between a firewall, IPS/IDS, and a web application firewall. All three are important security devices that help protect your environment and sensitive data in different ways. A firewall will generally control who can access your system and who cannot. An IPS/IDS will detect invalid or malicious packets that match particular signatures (usually provided by a vendor). A web application firewall will not just inspect packets, but will actually inspect full request and responses at the application level.

The following are just a few of the benefits gained by having a web application firewall in your environment:

* A Web Application Firewall directly satisfies PCI Requirement 6.6 (from PCI DSS v2.0)
* Provides protection at a high level, detecting not only malicious events, but also code exploits as well as other network anomalies.
* Customizability. Web application firewalls generally provide flexible rule engines as well as multiple logging solutions and default detection actions.

Read the full post »

©1996-2011 INetU Inc, All Rights Reserved.