CloudGuard WAF can now act as a **reverse proxy with load balancing**, allowing you to distribute incoming traffic across multiple upstream servers. This improves availability, scalability, and fault tolerance of your applications.

### Prerequisites

- You already have a CloudGuard WAF asset configured in **reverse proxy mode**.
- Your backend applications are reachable from the WAF.

### **Instructions:**

#### Step 1 – Open Your Asset

1. Go to the **Assets** page in the CloudGuard WAF portal.
2. Select the asset you want to configure.
3. Enable load balancing

#### Step 2 – Configure Upstreams

1. Click on the "Load balancer upstream setting.
2. Choose the Load Balancing Algorithm
   - Currently only "Round Robin" is supported
3. Provide the URL for each backend server
   - Make sure to include protocol and port if needed

#### Step 3 - Configure **Health Check** settings

Provide the following details:

- Path (Defaults to /)
- Port (Defaults to 80)
- Timeout setting (Defaults to 5s)
- Interval setting (Defaults to 5s)
- Healthy threshold (Defaults to 5)
- Unhealthy threshold (Defaults to 5)
- Expected status code (Defaults to 200)

#### Step 4 - Save and Enforce

Last updated 9 days ago.