Barracuda Load Balancer ADC Deployment and Quick Start Guide for Amazon Web Services

You can deploy the Barracuda Load Balancer ADC in a flat network (i.e., your management IP address and VIP address both reside in the same network) on Amazon Web Services (AWS). Complete the steps in this guide to configure, launch, and license your Barracuda Load Balancer ADC instance. Then log into the Barracuda Load Balancer ADC to verify your configuration and change your password before you start creating services.

Before you deploy the Barracuda Load Balance ADC on Amazon Web Services, ensure that you have completed the following:

• Set up an Amazon Virtual Private Cloud (VPC) for the Barracuda Load Balancer ADC.

• If you want to use the Bring Your Own Licensing (BYOL) model, get the Barracuda Load Balancer ADC license. See Bring Your Own License (BYOL). 

Create a security group with rules that specify the protocols, ports, and source IP ranges permitted to reach the instance. Multiple security groups can be created with different rules and assigned to each instance. For more information on security groups, refer to the AWS article Amazon EC2 Security Groups.

1. Log into the Amazon EC2 Management Console.

2. From the EC2 dashboard, select Security Groups under NETWORK & SECURITY.

3. Click Create Security Group.

4. In the Create Security Group window, do the following:

   1. Security group name: Enter a name to identify the security group.

   2. Description:Specify the description for the security group.

   3. VPC: Select a VPC ID from the list.

5. Under Security group rules, specify the inbound and outbound traffic to be allowed for the instance.

   1. Add ports 8000 and 443 in the inbound rule of the security group associated with the Barracuda Load Balancer ADC.  

   2. Add inbound rules to open the ports through which you configure the services on this instance.

   3. Add an outbound rule to ensure that all ports are open irrespective of the service type:

      • TYPE: All Traffic

      • Protocol: All

      • Port Range: All

      • Destination: 0.0.0.0/0

   4. If you are configuring Layer 4 services, add an inbound rule to ensure that all ports are open:

      • TYPE: All Traffic

      • Protocol: All

      • Port Range: All

      • Source: 0.0.0.0/0

   5. After adding the inbound and outbound rules, click Create.
      
      

6. The created group appears in the security group table.

Create a minimum of two network interfaces (one for MGMT access and the other for creating services). Ensure that you create the network interfaces in the subnet where you want to deploy the Barracuda Load Balancer ADC. The number of interfaces that can be attached to the Barracuda Load Balancer ADC depends on the instance type that you selected on Amazon Web Services. For information about instance types, see Licensing Options and Models.

1. Log into the Amazon EC2 Management Console.

2. From the EC2 dashboard, select Network Interfaces under NETWORK & SECURITY.

3. Click Create Network Interface.

4. In the Create Network Interface window, provide the following information for the network interface:

   • Description – Enter a name for the interface. 

   • Subnet – Select the subnet of the VPC where you want to create the instance.

   • Private IP – It is recommended that you enter a static primary private IP address.  

   • Security Groups – Select the security group that you created.

5. Click Yes, Create. 

You must also disable the Source/Dest. check in the interfaces that you created for the Barracuda Load Balancer ADC instance and configured servers. When this check is enabled, it breaks the Layer 4 services. 

1. Log into the AWS EC2 Management Console.

2. From the EC2 dashboard, select Network Interfaces under NETWORK & SECURITY.

3. Right click the interface and select Change Source/Dest. Check.

4. In the Change Source/Dest. Check window, set Source/dest. check to Disabled and then click Save. 

Depending on the Barracuda Load Balancer ADC instance type, you can add multiple secondary IP addresses on the interfaces that are used to create services on the Barracuda Load Balancer ADC. Do not add secondary IP addresses on the interface that is used for management access of the Barracuda Load Balancer ADC. For more information on multiple IP addresses, refer to the Amazon EC2 article Multiple IP Addresses.

To assign a secondary private IP address:

1. Log into the Amazon EC2 Management Console.

2. From the EC2 dashboard, select Network Interfaces under NETWORK & SECURITY.

3. Identify the interface needing a secondary private IP address assignment, and right-click the network interface attached to the instance.

4. Select Manage Private IP Addresses.

5. In the Manage Private IP Addresses window:

   1. Click Assign a secondary private address.

   2. In the Address field, enter an IP address that is within the subnet range for the instance. It is recommended that you use the static IP address instead of auto-assign.

   3. (Optional) To allow the secondary private IP address to be reassigned if it is already assigned to another network interface, select Allow reassignment.

   4. Click Yes, Update.

6. Click Close.

In the Amazon VPC that you configured, launch an Amazon EC2 instance with the Barracuda Load Balancer ADC AMI image. The Amazon Launch Instance wizard guides you through the following steps:

1. Log into the AWS Management Console and open the EC2 Management Console.

2. In the top right corner of the page, select the region for the instance. This is important because some Amazon EC2 resources can be shared between regions.

   Open

   

   
   
   

3. Click Launch Instance.
   
           

   Open

   

   
   
   

4. On the Step 1: Choose an Amazon Machine Image (AMI) page, select AWS Marketplace and then search for and select the Barracuda Load Balancer ADC AMI.
   
           

   
   
   

5. On the Step 2: Choose an Instance Type page, select an instance type from the All Instance types or General purpose table and then click Next: Configure Instance Details to continue.

   Open

   

6. On the Step 3: Configure Instance Details page: 

   1. Enter the Number of instances you want to launch.

   2. Select the appropriate Network in which you want to deploy the instance. 

   3. Select the Subnet of the VPC where you want to create the instance.

   4. In the Network Interface section:

      1. Select the network interface for Management access of the Barracuda Load Balancer ADC.

      2. Click Add Device and select the network interface for creating services on the Barracuda Load Balancer ADC.

   5. In the Advanced Details pane, keep the default setting for all parameters and then click Next: Add Storage.
      
      

      
      
      

7. On the Step 4: Add Storage page, review the storage device settings for the instance. Modify the values if required, and then click Next: Tag Instance.
   
           

   
   
   

8. On the Step 5: Tag Instance page, add/remove the tags for the instance (if required) and then click Next: Configure Security Group.
   
           

   
   
   

9. On the Step 6: Configure Security Group page, select the security groups that you created in Step 1 and then click Review and Launch.

   Open

   

10. On the Step 7: Review Instance Launch page, review your settings and then click Launch.