Switchover-Profiles

By default, Dynamic Path Selection only distributes new sessions to a better line. If you want ongoing sessions to be shifted to a better line, you have to enable session switchover. A session switchover only makes sense for unmasked connections, such as VPN or SD-WAN overlays. With masked connections, the public WAN address would change during the session, so it would be rejected by servers offering SIP sessions or online banking. Two configuration steps are necessary to enable session switchover:

1. The firewall rules for Dynamic Path Selection must have session switchover enabled
2. A switchover profile must be linked to the corresponding policy in the Policy assignments table

The switchover profile can be used to control how quickly the set of sessions is moved to the new line or interface on the same load balancer.

To prevent sessions from being concentrated on a single interface, sessions are usually moved step-by-step in groups within the configured timeframe. Before each step, a check sees whether the switchover is still necessary, because in the meantime the policy scores and thus the ranking of the interfaces may have changed. If it is no longer necessary, switchover is canceled and the sessions remain on their current interface. If it remains necessary, the sessions for the group being moved in the next step are determined at random.

If the number of steps = 1 or the overall time = 0, all of the sessions are moved immediately.