======Description and cases====== The SSG can act as a traffic balancer based on IP addresses belonging to an AS defined as ''local'' in ''asnum.dscp''.\\ In this case, the SSG-LB acts as an L2-bridge in the network, hence the name L2 traffic balancer. DPI functionality does not work in this mode. =====Case: Balancer on a traffic mirror===== Suppose a 400Gbps traffic mirror needs to be evenly distributed among four VAS platforms (Value-Added Services) performing traffic analysis and various detection.\\ In this case, SSG-LB will evenly distribute traffic with equal port utilization on the pullers and maintain traffic symmetry (traffic from one session will be directed to only one puller). {{ :en:dpi:load_balancer:load_balancer.png?450 |}} **Example configuration /etc/dpi/fastdpi.conf:** * Traffic mirroring is fed into 4x100G interfaces. * Traffic is balanced between four pullers, each puller is connected by 4x25G links. in_dev=05-00.0:05-00.1:05-00.2:05-00.3 out_dev=01-00.0:01-00.1:01-00.2:01-00.3:02-00.0:02-00.1:02-00.2:02-00.3:03-00.0:03-00.1:03-00.2:03-00.3:04-00.0:04-00.1:04-00.2:04-00.3 #FastDPI Control ctrl_port=29000 ctrl_dev=lo #Turn on Load Balancing enable_l2_lb=1 #Balance algorithm maglev=2 #Hash table lb_hash_out_dev_type=1