Multiple port group affinity does not rely on source IP address for affinity. Instead, the load balancer is configured to route the secondary Horizon protocols based on a group of unique port numbers assigned to each Unified Access Gateway appliance. The primary Horizon protocol on HTTPS port 443 is load balanced to allocate the session to a specific Unified Access Gateway appliance based on health and least loaded. The secondary connections are then routed to the correct Unified Access Gateway appliance based on the following Load Balancer configuration table.

Virtual IP Address

Primary/

Secondary

Protocol Name Real Servers

10.10.10.154:443

Primary

TCP

UAGLB - HTTPS

10.10.10.90:443

10.10.10.91:443

10.10.10.154:10143

Secondary

TCP

UAG01 - HTTPS

10.10.10.90:443

10.10.10.154:10143

Secondary

UDP

UAG01 - BLAST-UDP

10.10.10.90:8443

10.10.10.154:10172

Secondary

TCP

UAG01 - PCOIP

10.10.10.90:4172

10.10.10.154:10172

Secondary

UDP

UAG01 - PCOIP-UDP

10.10.10.90:4172

10.10.10.154:10243

Secondary

TCP

UAG02 - HTTPS

10.10.10.91:443

10.10.10.154:10243

Secondary

UDP

UAG02 - BLAST-UDP

10.10.10.91:8443

10.10.10.154:10272

Secondary

TCP

UAG02 - PCOIP

10.10.10.91:4172

10.10.10.154:10272

Secondary

UDP

UAG02 - PCOIP-UDP

10.10.10.91:4172

The same port mapping scheme can be used for additional Unified Access Gateway appliances 03 > 99. For example, we use the following mapping convention in this document for Unified Access Gateway.

The Unified Access Gateway Configuration for External URLs is shown below.

In our example, the FQDN http://uag.myco.com resolves to 10.10.10.154.

Unified Access Gateway Appliance Configuration Item Value

UAG01

tunnelExternalURL

https://uag.myco.com:10143

UAG01

blastExternalURL

https://uag.myco.com:10143

UAG01

pcoipExternalURL

10.10.10.154:10172

UAG02

tunnelExternalURL

https://uag.myco.com:10243

UAG02

blastExternalURL

https://uag.myco.com:10243

UAG02

pcoipExternalURL

10.10.10.154:10272

Advantages of Multiple Port Number Groups:

  • Does not rely on source IP affinity
  • Does not require multiple public virtual IP addresses

Disadvantages of Multiple Port Number Groups:

Uses non-standard port numbers from the Internet although the port numbers on the Unified Access Gateway appliances themselves are standard.