
Insert client IP
When this flag is enabled, Equalizer inserts an X-forwarded-for: header
with the client's IP address into all client requests before they are sent to
the server. This flag is disabled by default for HTTP clusters and enabled
by default for HTTPS clusters.
TCP Multiplexing
This selection enables TCP multiplexing for a cluster. TCP multiplexing
must also be enabled on at least one server instance in the server pool
assigned to the cluster (or one of its match rules).
Allow Multibyte Characters
By default, support for extended characters (8-bit ASCII and multibyte
UTF characters) in URIs is disabled. Equalizer returns a 400 Bad Request
error when a request URI contains 8-bit or multibyte characters. To enable
support for 8-bit and multibyte characters in URIs, click this checkbox.
There are potential risks to enabling this option, because it allows
Equalizer to pass requests that violate RFC2396; load-balanced servers
may be running software that is incapable of handling such requests.
Therefore, ensure that your server software is capable of handling URIs
containing extended characters and will not serve as a potential weak
point in your network before you enable extended characters.
Once only
Limits Equalizer to parsing headers (and executing match rules) for only
the first request of any client making multiple requests across a single TCP
connection. This option is off by default: meaning that Equalizer will parse
the headers of every client request.
Ignore case
Applies to L7 clusters and is the global setting to ignore case in match
expressions. You can override this value per cluster and per match rule.
See "Match Rules" on page 317 .
Spoof
When the spoof option is enabled on a cluster, Equalizer uses the client’sIP addressas
the source IP address in allpackets sent to a server in that cluster. Thisoption is
enabled by default.
When spoof is enabled, allserver responses to client requeststhat came through the
Equalizer cluster IP address must be routed by the server backto the client through
Equalizer. In many cases, the easiest way to do this is to set the default gateway on the
server with a server instance in a server pool to Equalizer’s IP address on the server
VLAN. If this is not possible, you can establish static routes on the server to send
responsesto specific client IP addresses to Equalizer’sIP addresson the VLAN.
If you disable spoof, the server receiving the request will see Equalizer’s IP address as
the client address because the TCP connection to the client isterminated when the
request is routed. The server will therefore send its response backto Equalizer’s IP
address. Disabling the spoof option enables Source Network Address Translation
(SNAT).
Compression (E650GX Only)
When this option is enabled, Equalizer automatically detects requests to
the cluster from compression-capable browser clients and performs GZIP
compression on all cluster responses sent to that client. This disable -
Disable this cluster. The cluster IP address will not accept requests when
this flag is enabled.
Rewrite Redirects (HTTPS
only-not shown above)
When enabled, forces Equalizer to pass responses from an HTTPS
cluster’s servers without rewriting them. In the typical Equalizer setup,
you configure servers in an HTTPS cluster to listen and respond using
HTTP; Equalizer communicates with the clients using SSL. If a server
sends an HTTP redirect using the Location: header, this URL most likely
will not include the https: protocol. Equalizer rewrites responses from the
Copyright © 2013 Coyote Point Systems. A subsidiary of Fortinet, Inc.
All Rights Reserved.
287
Equalizer Administration Guide
Kommentare zu diesen Handbüchern