topic Re: Alias Interface Cloudguard in Cloud Firewall

Alias Interface Cloudguard

sushantjoshi — Sun, 17 Nov 2024 14:21:55 GMT

I was trying to understand how Cross AZ Cluster with Transit Gateway works. I was reading the design guide and came across an alias interface. I was just trying to understand to what is the use case of external alias interface in the deployment.

Re: Alias Interface Cloudguard

Amir_Senn — Sun, 17 Nov 2024 14:50:54 GMT

This is adding this IP to topology since it's not directly related to the subnets.

If you don't add it you'll need to put explicit rule in the access control rule base to avoid drops when accessing with this IP.

Re: Alias Interface Cloudguard

Nir_Shamir — Mon, 18 Nov 2024 07:49:46 GMT

the alias is the 2nd IP address on the eth0 interface in each member.

We attach the "VIP" Public IP address to it and during failovers this IP detach and attach to the 2nd IP of the 2nd member and vice versa.