TestCompany has deployed VMware Horizon Workspace 1.5 in their environment to provide centralized workspace access from a variety of devices by their workforce. The infrastructure is accessed by clients both internally and externally. Among other supporting components, the deployment contains the following:

  • Two VMware Horizon Gateway-VAs
  • Two VMware Horizon Connector-VAs
  • One LoadMaster HA cluster deployed in the DMZ
  • One LoadMaster HA Ccuster deployed in the trusted corporate LAN

In the deployment architecture defined herein, the LoadMaster handles internal and external HTTPS connectivity to the Gateway-VAs as well as connectivity for the Connector-VAs. The LoadMaster provides the following for Workspace deployments:

  • Scheduling and health check algorithms which ensure that requests are sent to the best target
  • L7 content matching capabilities which minimize attack vectors for added security
  • Header injection functionality which ensures that client IPs are detected by Gateway-VAs
  • SSL overlay functions ensure L7 processing and an end-to-end secure traffic stream