D-Link 800 - DFL 800 - Security Appliance, User Manual

Page: 144 / 469

different metric. The route with the lowest metric is chosen first and when that route's interface
limits are exceeded, the route with the next highest metric is then chosen.
When that new route's interface limits are also exceeded then the route with the next highest
metric is taken and so on. As soon as any route with a lower metric falls below its interface limit
for its Hold Timer number of seconds, then it reverts to being the chosen route.
• If there is no alternative route, the route does not change.
If the spillover limit is reached but all alternative routes have also reached their limit then the
route will not change.
The Requirement for Matching IP Ranges
As explained above, when RLB is assembling a list of matching routes from a routing table, the
routes it selects must have the same range. Balancing between routes will not take place if their
ranges are not exactly the same.
For instance, if one matching route has an IP address range of 10.4.16.0/24 and there is a second
matching route with an address range 10.4.16.0/16 (which is a range that includes 10.4.16.0/24) then
RLB will not take place between these route. The ranges are not exactly the same so RLB will treat
the routes as being different.
It should also be remembered that route lookup will select the route that has the narrowest range that
matches the destination IP address used in the lookup. In the above example, 10.4.16.0/24 may be
chosen over 10.4.16.0/16 because the range is narrower for an IP address it contains.
RLB Resets
There are two occasions when all RLB algorithms will reset to their initial state:
• After NetDefendOS reconfiguration.
• After a high availability failover.
In both these cases, the chosen route will revert to the one selected when the algorithms began
operation.
RLB Limitations
It should be noted that the selection of different alternate routes occurs only when the route lookup
is done and it is based on the algorithm being used with the routing table used for the lookup and the
algorithm's state.
RLB cannot know how much data traffic will be related to each lookup. The purpose of RLB is to
be able to spread route lookups across alternatives on the assumption that each lookup will relate to
a connection carrying some assumed amount of traffic.
An RLB Scenario
Below is an illustration which shows a typical scenario where RLB might be used. Here, there is a
group of clients on a network connected via the LAN interface of the D-Link Firewall and these will
access the internet.
Internet access is available from either one of two ISPs, whose gateways GW1 GW2 are connected
to the firewall interfaces WAN1 and WAN2. RLB will be used to balance the connections between
4.4. Route Load Balancing Chapter 4. Routing
144