Data Sheet
FortiGSLB™ Cloud
Highlights
DNS-Based Global
Server Load Balancing
Ensuring Business Continuity Through Global Server Load Balancing
Traffic distributed to
multiple servers ensures Running a globally distributed application necessitates a robust
optimal performance
and reliability. strategy to address disruptions and ensure uninterrupted connectivity.
Health Checks Global redundancy involves implementing redundant hybrid
Monitor application applications (on-prem and on-cloud) to mitigate the impact of
endpoints and cloud
services health for disruptions, enhance resilience, and maintain connectivity even in the
proactive resource
management. face of application challenges.
Business Continuity
For a demo and more info, please visit:
Dynamic traffic
rerouting based on https://www.fortigslb.com/#/login
health checks, Geo-
location, and application
RTT minimizes the
impact of disruptions.
Ease of Deployment
Simplified and effective
GSLB solution.
1
FortiGSLB™ Cloud Data Sheet
Highlights Introduction
FortiGSLB Cloud is a DNS-based service designed to guarantee business continuity by
Autoscale Solution
keeping applications online and available, even in the face of localized application issues.
• No hardware performance Using custom health checks, the Global Server Load Balancing (GSLB) solution monitors
bottleneck application endpoints or cloud services. It aims to optimize the availability, user experience,
• Stackable license to and application security of enterprise applications.
increase performance
• Eliminates need to
accurately estimate Deployment
application volume in
advance How it works?
FortiGSLB Cloud provides load balancing across multiple datacenters (active/active) and cloud
Intelligent Traffic
applications based on GSLB Cloud Policies, with site selection according to application/server
Management
availability (health checks) and client geolocation.
• Advance load balancing
according to server/site
availability
• Supports DNS services
and load balancing-based
application health
Improved Performance
• Deliver to closest servers
based on geography
• Performance-based
routing based on client-
driven performance
metrics
• Reduced latency and
increased application
responsiveness
Improved Risk Management
• Automate detection and
execution of failover
services
• Customizable health
checks with choice of
protocols and parameters:
Ping, DNS, TCP, HTTP/S,
layer-7 Response code or
content
2
FortiGSLB™ Cloud Data Sheet
Key Features
Intelligent Traffic Management
FortiGSLB optimizes client requests for a specific domain by dynamically distributing the
workload across virtual servers, data centers, and locations. You can route traffic to your
network resources based on geography, server performance (CPU/memory) and load,
measured client and network performance, weighted distributions, consistent (sticky) routing,
and more.
Advanced Health Check
FortiGSLB Cloud monitors your application end points or your cloud services based on
configurable health checks. All of your resources are monitored continuously in real-time.
Customizable health checks let you choose your protocol and parameters, from simple ping to
an Application layer-7 response content match.
DNS Services
FortiGSLB offers full DNS Services (Primary and Secondary), includes DNSSEC and standard
DNS Zone and full support with the following resources types as A/AAAA record, CNAME, NS,
MX, TXT, SRV, and PTR.
Synthetic Testing
Synthetic testing checks applications availability by sending probes to applications from
FortiGSLB cloud. It can be used to monitor application website services or application
endpoints at various network layer, and the results of these tests can provide valuable
information on application up/down time, availability, and regional performance issues.
Fabric Connectors
FortiGSLB is part of Fortinet Security Fabric with multiple connectors to FortiADC, SD-WAN
and FortiGate.
The configuration on the FortiGSLB will be automatically sync the VIP, SD-WAN configuration
from the FortiGate or FortiADC through RestAPIs.
Seamless Failover to Second Closest Service
• Zero software/hardware needed
• No hardware performance bottleneck
• Managed via web interface
• Integrated API with Fortinet family
• One-click GSLB: Automate on-premise FortiADC configuration to FortiGSLB via API
3
FortiGSLB™ Cloud Data Sheet
Use Cases
Application Anywhere with FortiGate ZTNA and VIP, more info here
Fortinet Secure SD-WAN for Hybrid and Multi-Clouds
VPN Always-On using FortiGSLB
4
FortiGSLB™ Cloud Data Sheet
Feature Summary
GSLB Benefits Health Check
• ANYCAST support - Multi-Region (US/EMEA and APAC) • Support for various application/protocol validations:
deployment of FortiGSLB for best response time • TCP port
• Advanced global server load balancing • TCP echo
• Rolls out in minutes (no migration/coding necessary) • ICMP
• Easy to deploy • DNS
• Integration with Fortinet family products • UDP
• HTTP (GET/HEAD/Connect)
DNS Services • HTTPS (SSL validation, TLS 1.2, 1.3)
• Primary and Secondary DNS Server • Health check match for user/password, hostname, string
• DNSSEC Support validation, response code
• Support IPv4 and IPv6 • AND/OR relationship
• FQDN and zone services
Load Balancing
• Advanced DNS policy
• GEO: FortiGSLB performs load balancing according to
• Support DNS records: the request’s source geographic location.
• A/AAAA (address record)
• Least Connection: FortiGSLB Cloud load balances traffic
• CNAME (canonical name record) to the virtual server with the least connections.
• MX (mail exchange record) • Connection Limit: FortiGSLB Cloud performs load
• NS (name server record) balancing according to the virtual server connection limit
• PTR (pointer record) determined by the virtual server weight. The greater a
• SRV (service locator) virtual server weight, the more responses it gets.
• TXT (text record) • Bytes Per Second (BPS): FortiGSLB Cloud load balances
traffic to the virtual server with the least BPS.
• Service selection:
• Server Performance: FortiGSLB Cloud load balances
• Weight: DNS queries are load-balanced by weight.
traffic to the server with the lowest load (memory and
• DNS-Query-Origin: DNS queries are load-balanced to
CPU). Virtual servers with better server performance in
the pool with the same geographic information.
the CPU or memory (whichever one you give more weight
• Global Availability: DNS queries are load-balanced to
to) respond.
the first available pool.
Security Fabric
Management
• FortiADC
• License visibility
• FortiGate SD-WAN
• Central view (grid and list)
• FortiGate SSL-VPN
• Monitoring and site overview
• FortiGate ZTNA/VIP
• DNS history statistics
• FortiWeb
5
FortiGSLB™ Cloud Data Sheet
Ordering Information
Product SKU Description
FortiGSLB Cloud Service FC2-10-CGSLB-330-02-DD FortiGSLB Cloud Service - 100 QPS (queries per second) - Annual Subscription. Includes 24x7 FortiCare. Select
Health Checks separately.
FC3-10-CGSLB-330-02-DD FortiGSLB Cloud Service - 500 QPS (queries per second) - Annual Subscription. Includes 24x7 FortiCare. Select
Health Checks separately
FC4-10-CGSLB-330-02-DD FortiGSLB Cloud Service - 1000 QPS (queries per second) - Annual Subscription. Includes 24x7 FortiCare. Select
Health Checks separately
FortiGSLB Cloud Service with FC1-10-CGSLB-332-02-DD FortiGSLB Cloud Service - Additional 2 Advanced Health Checks.
Additional Advanced Health Checks
FC2-10-CGSLB-332-02-DD FortiGSLB Cloud Service - Additional 10 Advanced Health Checks.
FC4-10-CGSLB-332-02-DD FortiGSLB Cloud Service - Additional 100 Advanced Health Checks
Annual fee based on a DNS QPS and health checks.
Stackable license.
6
Fortinet Corporate Social Responsibility Policy
Fortinet is committed to driving progress and sustainability for all through cybersecurity, with respect for human rights and
ethical business practices, making possible a digital world you can always trust. You represent and warrant to Fortinet that you
will not use Fortinet’s products and services to engage in, or support in any way, violations or abuses of human rights, including
those involving illegal censorship, surveillance, detention, or excessive use of force. Users of Fortinet products are required
to comply with the Fortinet EULA and report any suspected violations of the EULA via the procedures outlined in the Fortinet
Whistleblower Policy.
www.fortinet.com
Copyright © 2024 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product
or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other
conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser
that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any
such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise
revise this publication without notice, and the most current version of the publication shall be applicable.
January 12, 2024
FGSLB-DAT-R03-20240112
