Configuring Load Balancing for KDC Service (TCP/UDP 88)

This section explains the steps to configure Load Balancing for KDC Service.

Procedure

1. Creating Application Profile: The default Layer 4 profile can be used (System-L4-application).
2. Creating TCP and UDP Profile: Use the same steps as followed for creating TCP profile for the Cert Proxy service. For UDP Profile - For TCP/UDP, navigate to Templates > Profiles > TCP/UDP and click Create.
3. Creating Monitor: To create a custom health monitor, navigate to Templates > Profiles > Health Monitors. Click on Create. Enter the details in the New Health Monitor and click Save.
4. Creating Persistence Profile: Use the same persistence profile that was created above for Cert Proxy service.
5. Creating IP group: Use the same IP group that was created above in IDM horizon service section.
6. Creating Server SSL Profile: Use the same SSL Profile that was created above in IDM horizon service section.
7. Creating Pool.
   1. To create the pool, navigate to Applications > Pools.
   2. Click on Create Pool. Enter the details as shown below:
   3. To bind the monitor, click on Add under Health Monitor and select the custom monitors that were created in the previous step.
   4. Select the Enable SSL option and select the server SSL profile that was created in the previous step. Click Next.
   5. In the Servers tab, select the IP group of the servers that we created above.
   6. Click Save.
8. Creating Virtual Service.

   You can use NSX Advanced Load Balancer VIP sharing capability, for creating virtual service for various service components. For more information, see Sharing a Single VIP across Multiple Virtual Services.

   1. Navigate to Applications > Virtual Services and select Create Virtual Service > Advanced Setup.
   2. Under VIP Address, click Switch to Advanced For the option under Virtual Service for VIP sharing, select the L7 virtual service that was created for the IDM Horizon service as shown below: