Inline TLS/SSL Decryption Solution with RIA

GigaSMART Flex Inline Solution can now be configured in a Resilient Inline Arrangement (RIA), which is supported on all GigaVUE HC Series devices. To learn more about Resilient Inline Arrangements refer to Configure Resilient Inline Arrangement.

A Resilient Inline Arrangement utilizes two nodes to manage traffic in dual-path high availability environments. Both nodes process traffic simultaneously, using the source and destination IP addresses for decision-making. Traffic received from the top network interfaces is directed based on the source IP, while traffic from the bottom network interfaces relies on the destination IP of the incoming traffic. Specifically, if the IP address ends with an even number, the traffic will be forwarded to one node; conversely, if it ends with an odd number, it will be sent to the other node.

For example:

In the Resilient Inline Arrangement described below, interface (I/F) 1 and I/F 2 are linked to node 1, while I/F 3 and I/F 4 connect to node 2. For connection 1, client 1's traffic from I/F 1, which has a VLAN A source and an IP address A, will be directed to GS1 in node 1 because the last decimal digit of IP A is even. Similarly, the traffic from server 1 of the same connection, originating from I/F 2 with VLAN A and destination IP A, will also be routed to GS1 in node 1.

For connection 2, since the last digit of IP C is even, the traffic from I/F 3 and I/F 4 will likewise be sent to GS1 in node 1. The traffic between GS1 and client 2 will occur on I/F 3 with VLAN B, requiring these packets to traverse the IBP that connects node 1 and node 2. In the same manner, the traffic between GS1 and server 2 will utilize I/F 4 after passing through the IBP.