Showing results for 
Search instead for 
Did you mean: 

load-balancing inbound sftp connections with ACE


Can anyone share experiences or any info relating to issues that might be encountered when load-balancing sftp protocol?

The goal is to distribute inbound file deposits evenly across SFTP servers.

High-level Overview

Clients -> Internet -> Tier-1 Firewall -> ACE Load-balancer -> SFTP Servers

Many Thanks

4 Replies 4

Syed Iftekhar Ahmed

SFTP is nothing but SSH. It uses a single connection. There are no issues loadbalancing it using traditional Layer 4 load balancing.

So you are good.

On the other hand FTP over SSL (FTPS) can neither offloaded nor loadbalanced using ACE.

FTPS uses multiple channels and Since the control channel is encrypted, ACe is not able to get the port numbers for the data connections.


Syed Iftekhar Ahmed

I would greatly appreciate if you can provide the following documents or links leading to any of these. I have been trying to configure ACE load balancing for SFTP and FTPS protocol.

You sttaed that FTPS can not be load balanced using ACE. Any official doc for this from Cisco.

Really appreciate it!

Use a L3 VIP with a sticky group based on source IP and use L4 load balancing; it may work only with FTPS in passive mode.

How about FTPS in Active mode. That is what I am trying to achieve.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: