LoadMaster for AWS

Feature Description

LoadMaster for
Amazon Web
Services (AWS)
Feature Description

VERSION: 1.9
UPDATED: APRIL 2015

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 1 / 26
LoadMaster for AWS
Feature Description

Copyright Notices
Copyright © 2002-2015 KEMP Technologies, Inc.. All rights reserved.. KEMP Technologies and the KEMP
Technologies logo are registered trademarks of KEMP Technologies, Inc..
KEMP Technologies, Inc. reserves all ownership rights for the LoadMaster product line including software
and documentation. The use of the LoadMaster Exchange appliance is subject to the license agreement.
Information in this guide may be modified at any time without prior notice.
Microsoft Windows is a registered trademarks of Microsoft Corporation in the United States and other
countries. All other trademarks and service marks are the property of their respective owners.
Limitations: This document and all of its contents are provided as-is. KEMP Technologies has made efforts
to ensure that the information presented herein are correct, but makes no warranty, express or implied,
about the accuracy of this information. If any material errors or inaccuracies should occur in this document,
KEMP Technologies will, if feasible, furnish appropriate correctional notices which Users will accept as the
sole and exclusive remedy at law or in equity. Users of the information in this document acknowledge that
KEMP Technologies cannot be held liable for any loss, injury or damage of any kind, present or prospective,
including without limitation any direct, special, incidental or consequential damages (including without
limitation lost profits and loss of damage to goodwill) whether suffered by recipient or third party or from
any action or inaction whether or not negligent, in the compiling or in delivering or communicating or
publishing this document.
Any Internet Protocol (IP) addresses, phone numbers or other data that may resemble actual contact
information used in this document are not intended to be actual addresses, phone numbers or contact
information. Any examples, command display output, network topology diagrams, and other figures
included in this document are shown for illustrative purposes only. Any use of actual addressing or contact
information in illustrative content is unintentional and coincidental.
Portions of this software are; copyright (c) 2004-2006 Frank Denis. All rights reserved; copyright (c) 2002
Michael Shalayeff. All rights reserved; copyright (c) 2003 Ryan McBride. All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted provided
that the following conditions are met:
1. Redistributions of source code must retain the above copyright notice, this list of conditions and the
following disclaimer
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the
following disclaimer in the documentation and/or other materials provided with the distribution.
THIS SOFTWARE IS PROVIDED BY THE ABOVE COPYRIGHT HOLDERS ''AS IS'' AND ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE ABOVE COPYRIGHT
HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
The views and conclusions contained in the software and documentation are those of the authors and
should not be interpreted as representing official policies, either expressed or implied, of the above
copyright holders..
Portions of the LoadMaster software are copyright (C) 1989, 1991 Free Software Foundation, Inc. -51
Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA- and KEMP Technologies Inc. is in full compliance
of the GNU license requirements, Version 2, June 1991. Everyone is permitted to copy and distribute
verbatim copies of this license document, but changing it is not allowed.
Portions of this software are Copyright (C) 1988, Regents of the University of California. All rights reserved.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 2 / 26
LoadMaster for AWS
Feature Description

Redistribution and use in source and binary forms are permitted provided that the above copyright notice
and this paragraph are duplicated in all such forms and that any documentation, advertising materials, and
other materials related to such distribution and use acknowledge that the software was developed by the
University of California, Berkeley. The name of the University may not be used to endorse or promote
products derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING,
WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE.
Portions of this software are Copyright (C) 1998, Massachusetts Institute of Technology
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated
documentation files (the "Software"), to deal in the Software without restriction, including without
limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
Software, and to permit persons to whom the Software is furnished to do so, subject to the following
conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions
of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING
BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
Portions of this software are Copyright (C) 1995-2004, Jean-loup Gailly and Mark Adler
This software is provided 'as-is', without any express or implied warranty. In no event will the authors be
held liable for any damages arising from the use of this software.
Permission is granted to anyone to use this software for any purpose, including commercial applications,
and to alter it and redistribute it freely, subject to the following restrictions:
1. The origin of this software must not be misrepresented; you must not claim that you wrote the original
software. If you use this software in a product, an acknowledgment in the product documentation would
be appreciated but is not required.
2. Altered source versions must be plainly marked as such, and must not be misrepresented as being the
original software.
3. This notice may not be removed or altered from any source distribution.
Portions of this software are Copyright (C) 2003, Internet Systems Consortium
Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is
hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING
ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE
USE OR PERFORMANCE OF THIS SOFTWARE.

Used, under license, U.S. Patent Nos. 6,473,802, 6,374,300, 8,392,563, 8,103,770, 7,831,712, 7,606,912, 7,346,695, 7,287,084 and
6,970,933

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 3 / 26
LoadMaster for AWS
Feature Description

Table of Contents
1 Introduction .................................................................................................................................... 5
1.1 Document Purpose ................................................................................................................. 5
1.2 Intended Audience .................................................................................................................. 5
2 LoadMaster for Amazon Web Services (AWS) ................................................................................ 6
2.1 Differences from the Virtual LoadMaster (VLM) .................................................................... 6
2.2 Create a New Key Pair ............................................................................................................. 6
2.3 Start a New Instance ............................................................................................................... 9
2.4 Initial Setup ........................................................................................................................... 15
2.5 Initial Configuration .............................................................................................................. 21
2.6 Create a Virtual Service ......................................................................................................... 22
3 Restart Web Services via the Console........................................................................................... 23
References ............................................................................................................................................ 25
Document History ................................................................................................................................. 26

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 4 / 26
LoadMaster for AWS
Feature Description

1 Introduction
Amazon Web Services (AWS) is a collection of remote computing services (also called web
services) that together make up Amazon’s cloud computing platform.

1.1 Document Purpose

This document is intended to brief the reader on the LoadMaster for AWS product and assist the
reader to set up a basic LoadMaster for AWS instance and create a service.

1.2 Intended Audience

This document is intended to be read by anyone who is interested in finding out about the
LoadMaster for AWS product.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 5 / 26
LoadMaster for AWS
Feature Description

2 LoadMaster for Amazon Web Services (AWS)

2.1 Differences from the Virtual LoadMaster (VLM)
Firstly, the initial IP address that is obtained is assigned by AWS, rather than obtained via
Dynamic Host Configuration Protocol (DHCP). The LoadMaster obtains this address at
instantiation and will use this as its interface address. This address is permanent for this
instance. This private address will be associated with a public IP address as well. Additional
private addressing can be assigned according to your needs if you have additional private
networks in AWS.
In addition, a public address which maps to the private address is issued by AWS. Unlike the
private address, the public IP address can be changed by purchasing an Elastic IP.

For more information on Elastic IPs, refer to the Amazon EC2 Elastic IP
Addresses Feature Guide. Elastic IPs can be requested by opening a Support
case with AWS. Elastic IPs can be allocated in the AWS EC2 Console in
NETWORK & SECURITY > Elastic IPs.

From within LoadMaster, interface IP addresses can be changed administratively as usual, but
this requires additional AWS configuration to prevent disconnection.
In order to preserve public ports, the Web User Interface (WUI) is available on port 8443 rather
than 443. This allows port 443 to be used for a Virtual Service.

2.2 Create a New Key Pair

When starting a new instance you will be prompted to select a key pair. A key pair is a certificate
and key. It is used to SSH to the LoadMaster. Keep the downloaded key in a safe place. Steps on
how to add a key pair are below:
1. Log in to the AWS console.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 6 / 26
LoadMaster for AWS
Feature Description

Figure 2-1: AWS console

2. Click EC2.

Figure 2-2: Key Pairs

3. In the main menu, select Key Pairs.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 7 / 26
LoadMaster for AWS
Feature Description

Figure 2-3: Create Key Pair

4. Click Create Key Pair.

Figure 2-4: Key pair name

5. Enter a name for the key pair and click Yes.

6. The .pem file will download.

This file is required to SSH into the LoadMaster so make a note of where
this file is stored. This file needs to reside on the client that is used to SSH
to the LoadMaster.

If you are using a client that does not accept PEM format, you will need to
convert the file to another format, for example PPK for Putty.

7. The permissions of the key pair file need to be changed in order for it to work. To do
this, go to the directory where the file is stored and run the following command:
chmod 600 <FileName>

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 8 / 26
LoadMaster for AWS
Feature Description

2.3 Start a New Instance

To start an instance, follow the steps below:
1. Go to the AWS Marketplace.

Figure 2-5: Search for Virtual LoadMaster

2. In the search bar, enter Virtual LoadMaster and click GO.

Figure 2-6: Virtual LoadMaster options

3. Click the relevant Virtual LoadMaster option.

4. Click Continue.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 9 / 26
LoadMaster for AWS
Feature Description

Figure 2-7: Log in

5. Log in using your account details.

Figure 2-8: Accept Terms

6. Click the Accept Terms & Launch with 1-Click button.

7. An email will be sent to confirm the subscription.
8. Follow the instructions on the email to subscribe.
9. Once subscribed, an instance of the software will be deployed on EC2.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 10 / 26
LoadMaster for AWS
Feature Description

Figure 2-9: Amazon Web Services Home

10. Go to the Amazon Web Services Home.

Figure 2-10: Sign In to the Console

11. Click Sign In to the Console.

Figure 2-11: EC2

12. Click EC2.

Figure 2-12: Launch Instance

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 11 / 26
LoadMaster for AWS
Feature Description

13. Click Launch Instance.

Figure 2-13: My AMIs

14. Click My AMIs.

Figure 2-14: EBS

15. Tick the EBS check box in the Root device type section.

It is recommended to use AMIs backed by Amazon EBS because they

launch faster and use persistent stora.

Figure 2-15: Select

16. Click the Select button on the relevant AMI.

Figure 2-16: Select the instance type

17. Select the appropriate instance type.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 12 / 26
LoadMaster for AWS
Feature Description

There are various models available which are all unique. Please review the
LoadMaster models available and decide the correct instance size for your
application. If needed, contact a KEMP representative to help in sizing your
requirements.

Figure 2-17: Next

18. Click Next: Configure Instance Details.

Figure 2-18: Configure Instance Details

19. Ensure to select the correct item (Virtual Private Cloud) in the Network drop-down list.

If multiple LoadMasters on multiple networks are needed, choose the

different networks as required. If more networks need to be created, please
contact your AWS administrator to add them. The Create new VPC link
can be used to add more networks if needed.

20. Ensure that the Auto-assign Public IP option is set to Enable.

21. Configure any other setting as needed.

Figure 2-19: Review and Launch

22. Click Review and Launch.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 13 / 26
LoadMaster for AWS
Feature Description

Figure 2-20: Edit security groups

23. Before launching, click Edit security groups.

24. Select the security group of your choosing or create a new security group.

Figure 2-21: Configure Security Group

The following rules are needed in the security group:

 Custom TCP Rule with the Port Range 8443 for the WUI
 SSH for the SSH management interface
 Any additional rules that are needed for other ports for services that will be
set up, for example Remote Desktop Protocol (RDP) if load balancing
Windows RDP servers, or HTTPS for a secure website

Select the relevant source option from the drop-down list and enter custom
IP addresses as needed.

It is recommended that management interfaces only be allowed via trusted IP addresses.

You should also add rules for any services you intend on creating. You can always revisit
this security group later if additional services become necessary.
25. Click Review and Launch.
26. Click Launch.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 14 / 26
LoadMaster for AWS
Feature Description

Figure 2-22: Select a key pair

27. Select the appropriate key pair for your environment. This is the key pair that was
created in Section 2.2. This key pair is needed to connect via SSH.
28. Select the check box.
29. Click Launch Instances.

Figure 2-23: Launch Status

30. Click View Instances. The Public IP address or Domain Name System (DNS) address can
be used to connect to the instance via HTTPS on port 8443.
31. Once your instance state is Running, you may proceed to connect to your LoadMaster
instance.

2.4 Initial Setup

After the instance has been launched, you first need to access the LoadMaster via SSH with
the required key pair to enable WUI access. The example steps below use PuTTY as the SSH
client.
1. Open the PuTTY client.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 15 / 26
LoadMaster for AWS
Feature Description

Figure 2-24: Enter IP address

2. Enter the IP address of the LoadMaster instance. This is the IP address obtained in Step
30 of Section 2.3.
3. In the main menu, navigate to Connection > SSH > Auth.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 16 / 26
LoadMaster for AWS
Feature Description

Figure 2-25: Authentication screen

4. Click Browse.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 17 / 26
LoadMaster for AWS
Feature Description

Figure 2-26: Browse to Key Pair file

5. Navigate to and select the key pair file that was exported in Section 2.2.

If you are using a client that does not accept PEM you will need to convert
the key pair file to another format, for example PPK for Putty.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 18 / 26
LoadMaster for AWS
Feature Description

Figure 2-27: Save settings

6. If desired, you can save the settings so that you do not have to perform these steps each
time you open a Putty session for this IP address. To do this, enter a name in the Saved
Sessions text box and click Save.
7. Click Open.

Figure 2-28: Log in

8. Log in with the username bal. This is the default LoadMaster username.

Figure 2-29: Enter the passphrase

9. Enter the passphrase if you specified one to be used for the private key.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 19 / 26
LoadMaster for AWS
Feature Description

Figure 2-30: Specify IP Address

10. You will then be asked to enter the IP address, default gateway and nameserver IP
addresses. These can be left as the default values but can be changed if needed. Press
OK on each of the screens to proceed.

Figure 2-31: Instance ID

11. You will be asked to enter the current LoadMaster password. By default, the password is
set to the Instance ID which can be found in the AWS EC2 Dashboard by selecting
Instances within the INSTANCES section of the main menu.
12. Enter and confirm the new password.

The password must be reset in order to access the LoadMaster Web User
Interface (WUI). If the password is not successfully reset initially, you will
need to restart web services via the console in order to access the WUI (after
the password has been successfully changed).

13. Log in with the new password.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 20 / 26
LoadMaster for AWS
Feature Description

Figure 2-32: Press Yes

14. You will then be directed to connect via a browser over port 8443 to continue
configuration. Press Yes and the session will automatically terminate.
Now the WUI access is enabled and can be accessed by following the steps in the next section.

2.5 Initial Configuration

Follow the steps below to initially set up the LoadMaster:
1. Open the VLM in a web browser by navigating to the address which was shown in the
last step of the previous section.
2. Acknowledge the self-signed certificate to proceed.

Figure 2-33: End User License Agreement

The certificate used by the WUI will take the public name used by
Azure/AWS.

3. Accept to End User License Agreement (EULA).

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 21 / 26
LoadMaster for AWS
Feature Description

4. A screen will then appear asking if you are OK with the LoadMaster regularly contacting
KEMP to check for updates and other information. Click the relevant button to proceed.
A prompt will appear asking for the username and password. Enter bal as the username and the
password that was set previously. The LoadMaster Is now licensed and is ready for
administration and configuration.

2.6 Create a Virtual Service

To create a Virtual Service, follow the steps below in the LoadMaster WUI:
1. In the main menu, select Virtual Services and Add New.

Figure 2-34: Virtual Service Parameters

2. Enter the private address of the LoadMaster instance in the Virtual Address text box.
3. Enter the relevant Port which was permitted in the Security Group.
4. Enter a recognizable Service Name.
5. Select the relevant Protocol.
6. Click Add this Virtual Service.
7. Configure the settings for the Virtual Service as needed, for example:
a. To enable SSL acceleration, select the Enabled check box in the SSL Properties section.
For more information on SSL offloading, refer to the SSL Accelerated Services, Feature
Description.
b. To enable ESP, select the Enable ESP check box in the ESP Options section. For more
information on how to configure the ESP options, refer to the ESP, Feature Description.
8. Add real servers in the Real Servers section.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 22 / 26
LoadMaster for AWS
Feature Description

3 Restart Web Services via the Console

If the initial password reset fails for any reason, for example if the default password is entered
wrong, or if the new password and confirmation do not match, you will need to restart web
services via the console (after the password has been reset) to enable access to the LoadMaster
WUI. See below for steps on how to do this:

Figure 3-1: Local Administration

1. In the console, go to Local Administration.

Figure 3-2: Web Address

2. Go to Web Address.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 23 / 26
LoadMaster for AWS
Feature Description

Figure 3-3: Immediately Stop Web Server Access

3. Select Immediately Stop Web Server Access.

Figure 3-4: Immediately Start Web Server Access

4. When finished, select Immediately Start Web Server Access.

After doing this, the WUI should become accessible.

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 24 / 26
LoadMaster for AWS
Feature Description

References
While the instructions above provide a basic overview of how to deploy and configure
LoadMaster for AWS, it is not designed to be a comprehensive guide to configure every possible
workload. This section identifies some of many guides published on our resources section of our
website. Unless otherwise specified, the following documents can be found at
http://www.kemptechnologies.com/documentation.

Licensing, Feature Description

ESP, Feature Description

SSL Accelerated Services, Feature Description

Web User Interface (WUI), Configuration Guide

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 25 / 26
LoadMaster for AWS
Feature Description

Document History

Date Change Reason for Change Version Resp.

June Release updates Updated for 7.1-16b release 1.3 LB

2014

July 2014 Minor changes Fixed defects 1.4 LB

July 2014 Release updates Updated for 7.1-18b 1.5 LB

Sep 2014 Release updates Updated for 7.1-20 1.6 LB

Oct 2014 Minor changes Fixed defects 1.7 LB

Jan 2015 Updates made Changes to steps 1.8 LB

Apr 2015 Updates made Updated for 7.1-26 1.9 LB

Copyright © 2002 - 2015 KEMP Technologies, Inc. All Rights Reserved. Page 26 / 26