Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We looking for a firewall/load-balancer appliance for our solution running on co-located servers in a data-center.

The appliance should have a throughput of 200 Mbps, and preferably have some scaling capabilities.


locked by HopelessN00b Mar 30 '15 at 14:09

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.

closed as off-topic by masegaloeh, HopelessN00b Mar 30 '15 at 14:09

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

Can you describe the "solution" in a bit more detail? i.e. are we talking about a Web application? – gravyface Feb 10 '11 at 17:58
The solution is a real-time video streaming platform, which requires good and reliable throughput. – SyRenity Feb 10 '11 at 18:09
up vote 3 down vote accepted

Well, OK, I'll bite:

  • Coyote Point is perhaps the largest of the reasonably-priced load balancer appliance makers.

  • Kemp Technologies is another commonly seen name.

  • Barracuda Networks is most known for their spam filtering appliances, but they also make load balancers.

  • If you don't need SSL on the load balancer, then HAProxy packaged as an appliance is a very viable option. Scroll down to "Commercial Support" and "Products using HAProxy".

  • Lastly, there is a network of brokers who re-sell second hand F5, Citrix NetScaler etc gear. That might also be an option.

Of the above, my personal choice would be 1) Coyote Point, 2) HAProxy appliance, and 3) Kemp. Fair warning, my personal opinion is based on older models & some speculation, and may not be accurate -- caveat emptor.

About the "firewall" part of the question: What I see is that firewalls mostly are a separate unit now, and the long-term trend is that firewalling functionality may move into the router. The load balancer is still a standalone unit, either an appliance, or software installed on a server. There are firewalls with load distribution based on for example IP hashing, and that can be a viable solution, but look at the health check and failover parts -- these are often lesser developed.

@SyRenity: OK, welcome aboard, hope I wasn't too annoying. :-) Quick note, above you wrote "real-time video streaming" -- keep in mind that some streaming video solutions don't use HTTP, but might use fx RTSP, MMS et cetera. – Jesper Mortensen Feb 10 '11 at 19:16
Hi. Sorry for long time taken to accept your answer. We tried both Coyote and Kemp, and were happy with their performance. The solution LB's the video streaming by itself, so only HTTP balancing was required. – SyRenity Apr 4 '11 at 11:54

This depends on your budget and how much support you want.

Cisco has lots of products that meet this requirement, at a premium price.
Juniper Networks almost certainly has something to fit the bill for somewhat less cost.
pfSense can also be configured as a load-balancer, and is available for cost-of-hardware.
And there's always the option of rolling your own with OpenBSD, FreeBSD, or any number of Linux distributions, all of which are cost-of-hardware solutions.


You should talk to the folks at I'm pretty sure they run HAProxy on off the shelf servers for some load balancing features.

If you really want an appliance, take a look at They will in effect sell you a HAProxy box on commodity hardware. (with support I think)

One more point: With video you have the added luxury of pushing some of the load balancing logic to the client side. You could effectively have NO load balancer serving video content and let the client query for a list of available servers which could be located /anywhere/.

That more or less how the solution works for video, HTTP still needs to be LB/HA somehow. – SyRenity Apr 4 '11 at 11:55

Not the answer you're looking for? Browse other questions tagged or ask your own question.