Web Application Controller Deployments

Standard Deployment Configuration

Barracuda Web Application Controllers are designed to easily fit into any existing data center environment and to rapidly secure and accelerate new and existing Web applications. Barracuda Networks offers the most flexible array of Web Application Controller deployment options, including both Bridge-path and Route-path.

Bridge-Path

The recommended mode of implementation for most customers with existing Web application traffic, Bridge-path mode enables simple and fast deployment without requiring any IP address changes on either the front- or back-end Web servers or network devices. The bridge is transparent, so no user traffic is disrupted.

Route-Path

Route-path provides the highest degree of protection for a Web application infrastructure by acting as a full reverse proxy for all Web application traffic. As a reverse proxy, Route-path allows only predefined traffic that adheres to security policies. Additionally, the reverse proxy controls the only route to the back-end network, so traffic cannot flow to any server unless specifically forwarded by the proxy. This is the most flexible deployment mode because it facilitates the content-based traffic management functions of the Web Application Controller.

Multiple Network Environments

A Barracuda Web Application Controller may be deployed to protect multiple applications and multiple subnets supporting a combination of Bridge-path or Route-path for different applications.

Fault Tolerant Barracuda Web Application Controller Environment

Some organizations may need only a single Barracuda Web Application Controller. When inline in Bridge-path, the Barracuda Web Application Controller Ethernet Hard Bypass ensures reliable application delivery. For Web applications with stringent security requirements, the Barracuda Web Application Controller may be installed in a redundant pair configuration, providing real-time application state replication so that security and user sessions will not be compromised during a failover event.