Use pfsense as an internal load balancer

  • Hello, I was hoping someone could help with this, or even offer another solution.

    We have 25 PFsense firewalls in our network, each with a different net block.  We are an Internet search engine.  I have the LAN side of each firewall in 4 VLANs.

    What I would like to do is simplify the load balancing of the firewalls for our developers; this would have many benefits as well.

    I would like to have the developers send their requests to one IP, for each VLAN, then have that device round robin between the firewalls.

    This way as I add more firewalls the developers don't need to know I just add them to the list.  Plus our developers can open 20 instances on one server; right now all 20 go out the default gateway.  If I was load balancing each request would go out a different gateway, this would simplify and improve things dramatically.

    I was hoping to use Pfsense then make a cluster for HA.

    Is this possible?


  • How many paths to the internet there and at what speed?

  • We are in a large data center.  Each firewall has it's own external network, we try to get them as different as possible.  So each one is a different path.  One VLAN has over 600 servers.  manually load balancing the gateways is painful.  Plus when I add a new firewall its a pain to go change 20-30 machines to use it.  If the whole VLAN used one IP as it's gateway, and that device could round robin each connection to a different firewall, that woudl simplify everything tremendously.  I would just add the new firewall to the list, instead of 20-30 servers.  Plus, we have some machines that spin up 20 different processes, I would love for each process to have a different gateway, instead of all having to use one.

    We have a full gigabit to the Internet, everything in our data center is gigabit.

    Thanks, I am open to any suggestions if there's a better way to do it.

Log in to reply