I have this architecture (without the firewall). I bought a Watchguard M570 as Firewall to add it in my network. My Question is : Could i use my watchguard and connect this one to my 2 LoadBlancers and route each one to its network as i draw in the picture ? 
- Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can post and accept your own answer.Ron Maupin– Ron Maupin ♦2022-11-19 23:50:24 +00:00Commented Nov 19, 2022 at 23:50
Add a comment |
1 Answer
Sure. You can use policy-based routing (by source address) to connect each LAN side to its own load balancer.
You'd be more flexible though if you connected the WAN links to the Watchguard directly and balanced everything there.
- Do you think, i can aggregate the 2 Links in the wathchguard m570. I tooked a look in the datasheets but i didnt find any think about its limits concerning making load balancingmydi88– mydi882019-10-29 20:14:58 +00:00Commented Oct 29, 2019 at 20:14
- I'm not familiar with Watchguards, but load balancing is just a matter of stateful policy-based routing, so whether one or more WAN links is used shouldn't matter much and the same limits should apply.2019-10-29 20:32:02 +00:00Commented Oct 29, 2019 at 20:32
- Question should be whether fw should be placed before or after load balancers, what is the best practice.hakkican– hakkican2024-03-07 08:36:39 +00:00Commented Mar 7, 2024 at 8:36
- @hakkican There's no single 'best' way to do it. As stated above I'd go without the load balancers unless there's a rigid requirement to use them. If there is, it all depends on what the firewall can and can't do. If it's up to the task, you should put the firewall in front of everything.2024-03-07 11:00:24 +00:00Commented Mar 7, 2024 at 11:00
- best practice means widely chosen or applied based on some reasoning, it is a design issue and decision, why should someone put the firewall in front of everything? and why should someone put it behind the load balancers? I am after some explanation; pros, cons, etc.hakkican– hakkican2024-03-08 06:01:26 +00:00Commented Mar 8, 2024 at 6:01