What's New in the Barracuda Load Balancer ADC

449 Pages·2017·9.14 MB·English

1. Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
1.1 What's New in the Barracuda Load Balancer ADC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
1.1.1 Release Notes Version 6.1.0.004 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
1.1.2 Release Notes Version 6.1.0.003 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
1.1.3 Release Notes Version 6.0.1.006 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
1.1.4 Release Notes Version 6.0.1.005 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
1.1.5 Release Notes Version 6.0.0.008 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
1.1.6 Release Notes Version 6.0.0.005 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
1.1.7 Release Notes Version 6.0.0.004 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
1.1.8 Release Notes Version 5.4.0.004 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
1.1.9 Release Notes Version 5.4.0.003 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
1.1.10 Release Notes Version 5.3.0.003 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
1.1.11 Release Notes Version 5.3.0.002 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
1.1.12 Release Notes Version 5.2.0.004 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
1.1.13 Release Notes Version 5.1.1.004 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
1.1.14 Release Notes Version 5.1.1.003 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
1.1.15 Release Notes Version 5.1.0.x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
1.2 Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
1.2.1 Deployment Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
1.2.2 Choosing Your Deployment Mode and Service Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
1.2.2.1 One-Armed Using a TCP Proxy, UDP Proxy, or Layer 7 Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
1.2.2.2 TCP Proxy, UDP Proxy, or a Layer 7 Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
1.2.2.3 Two-Armed Using TCP Proxy, UDP Proxy, or a Layer 7 Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
1.2.2.4 Two-Armed with Layer 4 Load Balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
1.2.3 Direct Server Return Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
1.2.3.1 Deploying DSR in a Microsoft Windows Server 2003 or 2008 Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
1.2.3.2 Deploying DSR in a Linux Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
1.2.3.3 Deploying DSR in Windows XP Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
1.2.4 Virtual Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
1.2.4.1 How to Deploy Barracuda Load Balancer ADC Vx Images . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
1.2.4.2 How to Deploy the Barracuda Load Balancer ADC Vx . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
1.2.4.3 Allocating Cores, RAM, and Hard Disk Space for Your Barracuda Load Balancer ADC Vx . . . . . . . . . . . . . . . . . . . . 51
1.2.4.4 Barracuda Load Balancer ADC Vx Quick Start Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
1.2.4.5 Backing Up Your Virtual Machine System State . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
1.2.5 Public Cloud Hosting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
1.2.5.1 Amazon Web Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
1.2.5.1.1 Barracuda Load Balancer ADC Deployment and Quick Start Guide for Amazon Web Services . . . . . . . . . . . . 62
1.2.5.1.2 Clustering the Barracuda Load Balancer ADC Instances in Amazon Web Services . . . . . . . . . . . . . . . . . . . . . 70
1.2.5.1.3 Configuring Services on the Barracuda Load Balancer ADC Vx for Amazon Web Services . . . . . . . . . . . . . . . 109
1.2.5.1.4 Creating a Link Bond on the Barracuda Load Balancer ADC Vx for Amazon Web Services . . . . . . . . . . . . . . . 111
1.2.5.1.5 Disk Expansion of the Barracuda Load Balancer ADC on Amazon Web Services (AWS) . . . . . . . . . . . . . . . . . 112
1.2.5.1.6 Troubleshooting the Barracuda Load Balancer ADC Vx on Amazon Web Services . . . . . . . . . . . . . . . . . . . . . 115
1.2.5.2 Microsoft Azure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
1.2.5.3 VMware vCloud Air Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
1.3 Getting Started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
1.3.1 Step 1 - How to Install the Barracuda Load Balancer ADC Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
1.3.2 Step 2 - How to Configure the Barracuda Load Balancer ADC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
1.3.3 Step 3 - How to Activate and Update the Barracuda Load Balancer ADC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
1.3.4 Step 4 - How to Configure Administrator Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129
1.3.5 Step 5 - How to Configure Your Network and Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
1.4 Application Deployment Guides . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
1.4.1 Barracuda Email Security Gateway Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
1.4.2 Barracuda Web Security Gateway Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
1.4.3 Citrix XenApp and XenDesktop Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139
1.4.3.1 Citrix XenApp and XenDesktop 6.x Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140
1.4.3.2 Citrix XenApp and XenDesktop 7.x Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143
1.4.4 IBM Domino Social Edition Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
1.4.5 Microsoft Exchange Server 2010 Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
1.4.5.1 How to Deploy Microsoft Exchange Server 2010 in a One-Armed Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154
1.4.5.2 How to Deploy Microsoft Exchange Server 2010 in a Two-Armed Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161
1.4.5.3 How to Test the Microsoft Exchange Server 2010 Deployment Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
1.4.6 Microsoft Exchange Server 2013 and 2016 Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166
1.4.7 Microsoft Forefront Unified Access Gateway Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171
1.4.8 Microsoft Lync 2010 and 2013 Server Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176
1.4.8.1 Understanding Microsoft Lync Server Deployment Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178
1.4.8.2 How to Deploy with Microsoft Lync Server 2010 and 2013 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180
1.4.8.3 IP Worksheet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188
1.4.9 Microsoft Remote Access (Direct Access and VPNs) Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189
1.4.10 Microsoft SharePoint Server Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191
1.4.11 Microsoft Windows AD FS Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
1.4.12 Moodle Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198
1.4.13 Remote Desktop Services Deployment (Including Remote Desktop Gateway) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202
1.4.13.1 Remote Desktop Services Configuration When the Session or Connection Broker Is Deployed . . . . . . . . . . . . . . . . 209
1.4.14 VMware Horizon View Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211
1.5 Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220
1.5.1 How to Create a Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 221
1.5.2 Persistence Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222
1.5.3 How to Configure Service Groups and Service Group Persistence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 224
1.5.4 Layer 4 TCP and Layer 4 UDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225
1.5.5 TCP Proxy, Secure TCP Proxy, and UDP Proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 226
1.5.6 HTTP Service and HTTPS Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227
1.5.7 Instant SSL Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 230
1.5.8 FTP and FTP SSL Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231
1.5.9 Layer 7 RDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
1.5.10 SSL Offloading . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233
1.5.11 How to Enable HTTP/2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 234
1.5.12 How to Secure Communication with Real Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235
1.5.13 How to Select a Scheduling Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 236
1.5.14 How to Configure Adaptive Scheduling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 238
1.6 Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241
1.6.1 How to Integrate an External Authentication Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 242
1.6.2 How to Configure Access Control (AAA) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246
1.6.3 How to Configure Single Sign-On (SSO) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259
1.6.4 How to Set Up a Custom Login Page for Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 261
1.6.5 How to Configure SMS Passcode Authentication Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263
1.6.6 How to Set Up a Custom Challenge Page for Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 264
1.7 Technical White Papers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266
1.7.1 PCI Compliance Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267
1.8 Traffic Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273
1.8.1 Content Rules for HTTP and HTTPS Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274
1.8.2 Extended Match and Condition Expressions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275
1.8.3 Understanding HTTP Rewrite Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279
1.8.4 Content Rewriting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284
1.8.5 Example - Using Response Body Rewrite to Enable Web Sites for Google Analytics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287
1.8.6 Understanding HTTP Caching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288
1.8.7 Understanding HTTP Compression . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289
1.9 Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290
1.9.1 How to Configure Syslog and other Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291
1.9.2 How to Make the Client IP Address Available to the Back-end Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294
1.9.2.1 Logging Actual Client IP Address In the IIS 7 and IIS 7.5 Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297
1.9.2.2 Logging Actual Client IP Address on the Apache Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 298
1.9.3 How to Mask Sensitive Data in Logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299
1.9.4 Viewing Logs on the Barracuda Load Balancer ADC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 300
1.9.5 System Log Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 301
1.10 Global Server Load Balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321
1.10.1 Global Server Load Balancing Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 322
1.10.2 Installing Global Server Load Balancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 326
1.10.3 Integrating Global Server Load Balancing with the Existing DNS Infrastructure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329
1.10.4 Implementing Global Server Load Balancing Regions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 330
1.11 Application Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331
1.11.1 Security Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 332
1.11.1.1 Configuring Cloaking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 333
1.11.1.2 Configuring Data Theft Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 334
1.11.1.3 Configuring Global ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 335
1.11.1.4 Configuring Parameter Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 336
1.11.1.5 Configuring Request Limits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 337
1.11.1.6 Configuring the Action Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 338
1.11.1.7 Configuring URL Normalization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339
1.11.1.8 Configuring URL Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 340
1.11.1.9 Securing HTTP Cookies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 341
1.11.2 Slow Client Attack Prevention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 342
1.11.3 Configuring Website Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343
1.11.4 How to Configure Antivirus Protection for File Uploads and Downloads . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 346
1.11.5 How to Configure Data Theft Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347
1.11.6 How to Configure Brute Force Prevention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 349
1.11.7 How to Configure Session Tracking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 350
1.11.8 Allow/Deny Rules for Headers and URLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351
1.11.8.1 Allow/Deny Rules for Headers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 352
1.11.8.2 Allow/Deny Rules for URLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 353
1.11.9 Extended Match Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 354
1.11.10 Configuring User Defined Patterns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 356
1.11.10.1 Regular Expression Notation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 360
1.12 Networking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362
1.12.1 Creating Static Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 363
1.12.2 Adding Custom Virtual Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 364
1.12.3 Network Address Translation NAT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 365
1.12.4 How to Use IPv6 with Barracuda Load Balancer ADC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 366
1.12.5 Multiport Link Aggregation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 367
1.12.6 VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369
1.12.7 Network Access Control Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 370
1.12.7.1 How to Configure an IP Reputation Pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371
1.12.8 How the Barracuda Load Balancer ADC Selects the Source IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 372
1.12.9 Subnetwork Masks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 373
1.13 Certificate Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374
1.13.1 How to Add an SSL Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 375
1.13.2 Installing SSL Certificates with Correct Chain Order . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 377
1.13.3 How to Pass Client Certificate Details to a Back-end Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 379
1.13.4 Allowing or Denying Client Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381
1.13.5 Client Certificate Validation Using OCSP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 382
1.13.6 Creating a Client Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 383
1.14 Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 385
1.14.1 How to View System Health, Status, and Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 386
1.14.2 Monitoring the Health of Services and Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 387
1.14.2.1 How to Create Monitor Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 388
1.14.2.2 Understanding Testing Methods for Services and Real Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 389
1.14.3 Reporting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 392
1.14.3.1 Traffic Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 393
1.14.3.2 Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 396
1.14.3.3 PCI DSS Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 397
1.14.3.4 Configuration Summary Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 398
1.14.3.5 Administration/Audit Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 399
1.14.4 How to Automate System Alert and SNMP Trap Delivery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 400
1.14.5 How to Configure SNMP Monitoring on the Barracuda Load Balancer ADC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 401
1.14.6 SNMP Objects and Traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 402
1.14.7 How to Enable, Disable, and Maintain Real Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 416
1.14.8 How to Remotely Administer Real Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418
1.14.9 How to View System Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419
1.15 High Availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 420
1.15.1 Understanding Barracuda Load Balancer ADC High Availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 421
1.15.2 How to Configure the Barracuda Load Balancer ADC for High Availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 422
1.15.3 How to Manage a High Availability Environment with Two Barracuda Load Balancer ADCs . . . . . . . . . . . . . . . . . . . . . . . . 423
1.15.4 How to Remove a Barracuda Load Balancer ADC from a High Availability Environment . . . . . . . . . . . . . . . . . . . . . . . . . . 424
1.15.5 How to Replace a Barracuda Load Balancer ADC in a High Availability Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 425
1.15.6 How to Update the Firmware on Clustered Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 427
1.15.7 High Availability - Firewall Failover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 428
1.16 System Administration and Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429
1.16.1 How to Reload, Restart, and Shut Down the System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 430
1.16.2 How to Configure Administrator Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 431
1.16.3 How to Update Definitions Under Energize Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 434
1.16.4 How to Update and Revert the Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 436
1.16.5 How to Back Up and Restore Your System Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 438
1.16.6 How to Reboot the System in Recovery Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 439
1.16.7 How to Replace a Failed System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 440
1.16.8 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 441
1.16.9 How to Migrate from the Barracuda Load Balancer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 442
1.17 Barracuda Load Balancer ADC - REST API . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 444
1.18 Barracuda Load Balancer ADC Hardware Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 445
Barracuda Load Balancer ADC Administrator's Guide - Page 5
Overview
The Barracuda Load Balancer ADC is a unified high-performance platform that helps organizations achieve their availability, acceleration,
application control, and application security objectives.
Where to Start
Download the Barracuda Load Balancer ADC Quick Start Guide in English, German, or Japanese.
For detailed instructions on installing the Barracuda Load Balancer ADC hardware or the on how to install the virtual appliance, see Getting
Started.
Application Deployment Guides
Barracuda Email Security Gateway Deployment
Barracuda Web Security Gateway Deployment
Citrix XenApp and XenDesktop Deployment
IBM Domino Social Edition Deployment
Microsoft Exchange Server 2010 Deployment
Microsoft Exchange Server 2013 and 2016 Deployment
Microsoft Forefront Unified Access Gateway Deployment
Microsoft Lync 2010 and 2013 Server Deployment
Microsoft Remote Access (Direct Access and VPNs) Deployment
Microsoft SharePoint Server Deployment
Microsoft Windows AD FS Deployment
Moodle Deployment
Remote Desktop Services Deployment (Including Remote Desktop Gateway)
VMware Horizon View Deployment
Key Features
Load balancing with dynamic scheduling and advanced monitoring capabilities
SSL offloading, TCP connection pooling and caching, and compression to help accelerate application delivery
Content-based routing to provide fine-grained application control
Integrated application security to protect against application level attacks including the OWASP Top 10 risks
Protection against theft of sensitive and confidential data
Publish
Copyright © 2017, Barracuda Networks Inc.
Barracuda Load Balancer ADC Administrator's Guide - Page 6
What's New in the Barracuda Load Balancer ADC
What's New in Version 6.1
HTTP/2 Protocol over HTTPS: Support has been added for the HTTP/2 protocol over HTTPS.
Microsoft Azure: The Barracuda Load Balancer ADC is now available on Microsoft Azure.
High Availability: The Barracuda Load Balancer ADC on AWS now supports clustering across two availability zones for increased resilience and
high availability.
Auto Scaling Groups: Support has been added for configuring auto scaling groups as back-end servers in AWS.
For detailed information on the fixes and enhancements that are included in Barracuda Load Balancer ADC version 6.1, see:
Release Notes Version 6.1.0.004
Release Notes Version 6.1.0.003
What's New in Version 6.0
Barracuda Load Balancer ADC models 641 and 642: The latest versions of Barracuda Load Balancer ADC models 641 and 642 leverage
specialized hardware to accelerate SSL transactions. These models now have dual power supplies.
Connection Logs: You can now use connection logs to display information about the connections made to the configured services and to the
associated servers.
Reporting: A new reporting module has been introduced to the Barracuda Load Balancer ADC with more than 25 reports and built in drill down
functions.
Source IP Persistence: Source IP Persistence support has been added at the Service Group level.
Static Source IP Addresses: You can now configure a static source IP address to connect to the real servers.
RBAs: Role Based Administrators (RBAs) are now supported.
Augmented SSL Capabilities:
Subject Alternative Names (SAN) certificate creation
SSL Session Resumption
Strict Transport Security (HSTS)
SSL Session ID Persistence
For detailed information on the fixes and enhancements that are included in Barracuda Load Balancer ADC version 6.0, see:
Release Notes Version 6.0.1.006
Release Notes Version 6.0.1.005
Release Notes Version 6.0.0.008
Release Notes Version 6.0.0.005
Release Notes Version 6.0.0.004
What's New in Version 5.4
Barracuda Web Security Gateway service: Enables you to load balance traffic across multiple Barracuda Web Security Gateways (previously
Barracuda Web Filter).
VMware VDI over HTTPS and PCoIP: VMware Virtual Desktop Infrastructure (VDI) over HTTPS and Personal Computer over Internet Protocol
(PCoIP) is now supported.
For detailed information on the fixes and enhancements that are included in Barracuda Load Balancer ADC version 5.4, see:
Release Notes Version 5.4.0.004
Release Notes Version 5.4.0.003
What's New in Version 5.3
SSL Hardware Support: SSL hardware support is now available.
For detailed information on the fixes and enhancements that are included in Barracuda Load Balancer ADC version 5.3, see:
Release Notes Version 5.3.0.003
Release Notes Version 5.3.0.002
Copyright © 2017, Barracuda Networks Inc.
Barracuda Load Balancer ADC Administrator's Guide - Page 7
What's New in Version 5.2
SSL Enhancements: Perfect Forward Secrecy (PFS) with ECDSA and RSA certificates and associated ciphers are now supported. The key
exchange mechanism supported is Elliptic Curve DHE. These SSL enhancements are increasingly relevant in a post-Snowden world. With PFS,
communications intercepted today can never be decrypted, even far into the future, due to the ephemeral nature of the PFS scheme. You can
also customize backed SSL, including SNI extensions in the TLS header if the server requires this to be enabled. Supports Certificate Revocation
List (CRL) and OCSP validation for client certificates. And supports Intel QuickAssist Technology for SSL acceleration in the Barracuda Load
Balancer ADC 840 and above.
Traffic Management Enhancement: The Redirect Rule feature is now supported in the Barracuda Load Balancer ADC 340 and 440.
Load Balancer Migration Enhancement: You can now configure the WAN IP address, network mask, and gateway when restoring the
Barracuda Load Balancer 4.x backup file to the Barracuda Load Balancer ADC
For detailed information on the fixes and enhancements that are included in Barracuda Load Balancer ADC version 5.2, see:
Release Notes Version 5.2.0.004
What's New in Version 5.1
Authentication and Authorization: Barracuda Load Balancer ADC models 540 and above can be integrated with an external authentication
server for client authentication. LDAP, RADIUS and Kerberos authentication protocols are supported. You can create authorization policies that
control access by authenticated users to web applications.
Application Security: The Application Security subscription, which adds Layer 7 security to your existing HTTP-, HTTPS-, FTP- or FTPS-based
applications, is being made available at no charge to all ADC customers on models 540 and above. Configure security policies using the pages
under the SECURITY tab.
Support for Barracuda Load Balancer Configuration: You can restore backup files from a Barracuda Load Balancer to a new ADC system.
Networking: Policy-based routing to route packets on a specific interface. You can add policy-based routing rules on the NETWORK > Routes
page.
User Interface
The BASIC > Services page makes it easier to add, edit, and view services and servers. You can view and update every option when
you add a service or a server. If you have similar services, you can use the settings of one service as a starting point when creating a
new service. And, as before, you can view the status of all services and real servers at a glance.
The BASIC > Status and SECURITY > Security Policies pages also have a new layout.
The web interface has a new color scheme and improved look and feel.
An Instant SSL service (that redirects an HTTP connection to an HTTPS service) appears as only one service in the user interface. An
Instant SSL service includes both the service port and the redirect port.
For detailed information on the fixes and enhancements that are included in Barracuda Load Balancer ADC version 5.1, see:
Release Notes Version 5.1.1.004
Release Notes Version 5.1.1.003
Release Notes Version 5.1.0.x
Copyright © 2017, Barracuda Networks Inc.
Barracuda Load Balancer ADC Administrator's Guide - Page 8
Release Notes Version 6.1.0.004
Before installing any firmware version, back up your configuration and read all release notes that apply to versions more recent than
the one currently running on your system.
Do not manually reboot your system at any time during an update unless otherwise instructed by Barracuda Technical
Support. Depending on your current firmware version and other system factors, updating can take up to 10 minutes. If the process
takes longer, contact Barracuda Technical Support for further assistance.
Known Issues
In the High Availability environment, deleting a Layer 4 service or editing the server associated with the Layer 4 service in the Passive
unit is not handled properly in the backend. It is recommended to perform these operations on the Active unit. [BNADC-5795]
Due to known issues, the SSL hardware option is disabled in the Barracuda Load Balancer ADC 640 and 840. The administrator can
manually enable the SSL hardware functionality (if required). [BNADC-8689]
Fixes
False Energize Update Expired alert emails are not generated when the unit is offline. This issue has been addressed. [BNADC-8599]
Adding a new line in the Comments text box for Attack Types resulted in a configuration rollback. This issue has been addressed.
[BNADC-8614]
The data path crash when the Response Body Rewrite rule was configured for a service, has been fixed. [BNADC-8656]
The data path crash in HTTP2 traffic has been fixed. [BNADC-8657]
A GET query for service groups can now be executed without a forward slash in the REST API URL. [BNADC-8702]
Copyright © 2017, Barracuda Networks Inc.
Barracuda Load Balancer ADC Administrator's Guide - Page 9
Release Notes Version 6.1.0.003
Before installing any firmware version, back up your configuration and read all release notes that apply to versions more recent than
the one currently running on your system.
Do not manually reboot your system at any time during an update unless otherwise instructed by Barracuda Technical
Support. Depending on your current firmware version and other system factors, updating can take up to 10 minutes. If the process
takes longer, contact Barracuda Technical Support for further assistance.
Features
Support has been added for the HTTP/2 protocol over HTTPS. [BNADC-7208]
The Barracuda Load Balancer ADC is now available on Microsoft Azure. [BNADC-7721]
The Barracuda Load Balancer ADC on AWS now supports clustering across two availability zones for increased resilience and high
availability. [BNADC-8017]
Support has been added for configuring auto scaling groups as back-end servers in AWS. [BNADC-8353]
Enhancements
High Availability now supports automatic failover in case a critical process fails on an active device. [BNADC-1485]
Server health checks now support HTTP/1.0 and HTTP/1.1. [BNADC-5632]
The internal platform utilities and kernel have been upgraded. [BNADC-6461]
LDAP nested groups across different domains are now supported. [BNADC-7595]
Support for the AWS proxy protocol in WebSocket has been added and a known issue with backend SSL over WebSocket has been
addressed. [BNADC-7613]
The FTP access log can now be exported instantly. [BNADC-8408]
Fixes
Global Server Load Balancing (GSLB) can now process traffic without interruption. [BNADC-7021]
The serial number of the clustered peer Barracuda Load Balancer ADC is now displayed on the ADVANCED > High Availability page in
the Clustered System section. [BNADC-7101]
Both units in a high availability cluster are in the active state. This has been addressed. [BNADC-7134]
You can now specify the maximum number of times a user can attempt to authenticate. [BNADC-7392]
When starting Instant SSL with an existing HTTP service, there are duplicate database variables. This has been addressed.
[BNADC-7471]
A report is now being sent when an SMTP sever is configured with a user name and password. [BNADC-7866]
A character is being removed while completing a SharePoint rewrite. This has been addressed. [BNADC-7933]
Dual Authentication is now supported with LDAP as the primary authentication service and Radius as the secondary authentication
service. [BNADC-8022]
The initial characters of a certificate name can now include numbers. [BNADC-8137]
If you set Enable High Availability to Yes, the default value for Failback Mode is now set to Manual. [BNADC-8155]
Changing the service type from INSTANT SSL to HTTP/HTTPS and then back to INSTANT SSL now correctly creates the Redirect
service. [BNADC-8422]
After upgrading the firmware, the system failed to reboot due to a networking issue. This has been addressed. [BNADC-8449]
If the LDAP authentication service's default role is changed by the administrator in the ADVANCED > Admin Access Control page, the
role of LDAP mapped users is not changed. [BNADC-8453]
The domain name can now be sent along with the username to the Radius server for user authentication. [BNADC-8598]
Copyright © 2017, Barracuda Networks Inc.
Barracuda Load Balancer ADC Administrator's Guide - Page 10
Release Notes Version 6.0.1.006
Before installing any firmware version, back up your configuration and read all release notes that apply to versions more recent than
the one currently running on your system.
Do not manually reboot your system at any time during an update unless otherwise instructed by Barracuda Technical
Support. Depending on your current firmware version and other system factors, updating can take up to 10 minutes. If the process
takes longer, contact Barracuda Technical Support for further assistance.
Fixes
The wildcard character asterisk (*) is now allowed while configuring SNI domains. For example, *.abc.com [BNADC-7923]
HTTP Strict Transport Security (HSTS) is now available on all Barracuda Load Balancer ADC models. [BNADC-7907]
If the FTP access log is configured, all temporary access log files are cleared after transmitting the log files to the FTP server.
[BNADC-7943]
Processing HTTP headers in requests no longer triggers errors. [BNADC-7906]
For all web browsers, web pages are now served properly even after refreshing the page. [BNADC-7927]
Copyright © 2017, Barracuda Networks Inc.