An implementation of FortiGate Autoscale for the Amazon AWS platform API with a Dynamo DB storage backend.
This project provides multi-group Auto Scaling functionality for Fortinet FortiGate EC2 instances to form an HA cluster with failover protection. For deployment on other cloud platforms, visit the relevant repository:
- The AliCloud deployment is in the alicloud-autoscale repository.
- The Azure deployment is in the fortigate-autoscale repository.
- The GCP deployment is in the fortigate-autoscale-gcp repository.
This project has the following features:
- Multi-group Hybrid Licensing models:
- BYOL-Only: 1 dynamically scalable Auto Scaling group of (0 or more) Bring Your Own License (BYOL) FortiGate instances.
- PAYG-Only: 1 dynamically scalable Auto Scaling group of (0 or more) on-demand FortiGate instances.
- Hybrid: 1 fix-sized Auto Scaling group of 2 (or more) BYOL FortiGate instances, and 1 dynamically scalable Auto Scaling group of (0 or more) on-demand FortiGate instances.
- AWS Transit Gateway integration.
- FortiAnalyzer integration.
To obtain the deployment package, use one of the following:
- Download the package aws-cloudformation.zip directly from the project release page.
- Manually generate the deployment package in your local workspace:
- From the project release page, download the source code (.zip or .tar.gz) for the latest version.
- Extract the source code into the project directory in your local workspace.
- Run
npm install
to initialize the project at the project root directory. - Run
npm run build-artifacts
to generate the local deployment package. - The deployment package aws-cloudformation.zip will be available in the dist/artifacts directory.
More diagrams are available in docs/diagrams
Deployment guides are available from the Fortinet Document Library:
- FortiGate / FortiOS 7.0 Deploying auto scaling on AWS
- FortiGate / FortiOS 6.4 Deploying auto scaling on AWS
- FortiGate / FortiOS 6.2 Deploying auto scaling on AWS
New VPC, no-TGW | Existing VPC, no-TGW | TGW Integration (new VPC) |
---|---|---|
Fortinet-provided scripts in this and other GitHub projects do not fall under the regular Fortinet technical support scope and are not supported by FortiCare Support Services. For direct issues, please refer to the Issues tab of this GitHub project. For other questions related to this project, contact github@fortinet.com.
License © Fortinet Technologies. All rights reserved.