Fortinet, Inc.
Hybrid cluster architecture for reverse proxies

Abstract:

Systems and methods for an improved HA cluster architecture that provides for seamless failover while also maintaining full processing capacity are provided. According to one embodiment, each member of a hybrid HA cluster of reverse proxy network security devices is configured to operate in an active mode or in a backup mode. A primary member of a set of active members of the cluster receives and processes network traffic. The cluster detects existence of a failure scenario of multiple potential failure scenarios involving an active member, including (i) failure of the primary member; and (ii) failure of a non-primary member. Responsive to detecting the existence of the failure scenario, seamlessly failing over from the failed active member to a backup member of a set of backup members of the cluster by causing the backup member to join the set of active members by placing it in the active mode.