Athena SWG (Secure Web Gateway)

Athena SWG (formerly Internet Access Gateway) ensures visibility and control across the network, detecting risks like unauthorized access, non-compliant activities, and data leaks to manage endpoints.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
13.0.120
{{sendMatomoQuery("Athena SWG (Secure Web Gateway)","Link Load Balancing")}}

Link Load Balancing

{{ $t('productDocDetail.updateTime') }}: 2025-12-29

To ensure the Internet experience of core users and core applications while being limited by limited high-quality bandwidth resources, users eagerly hope to be able to use applications that do not require high real-time performance and stability (such as P2P, P2P streaming media, web streaming media, games, etc.)  Drain traffic to links with large bandwidth and average quality, channel core users (such as management, etc.), and core applications (such as video conferencing, etc.) requiring high real-time and stability to high-quality lines. This way is guaranteed that those application experiences with high real-time requirements significantly improve work efficiency.

IAG traffic routing supports improving users' bandwidth usage via traffic optimization functions, such as IP address, protocol, user routing, application routing, bridge scenario routing, and DNS proxy.

Description of the Diversion Scheme

Sangfor application diversion scheme supports various flexible deployment methods, implements application diversion via routing deployment, and combines with routers/firewalls offered by mainstream manufacturers. It also supports tag-based diversion and meeting scenarios to which different links of clients are accessed.

P4301#yIS1        P4301#yIS2

Sangfor Internet access control adopts application routing, DNS transparent proxy, and link busy control. You can implement an allocation mechanism to allocate the links based on factors including load situations of links, time range, user group, and access objects to optimize the links' usage further.

It also supports setting the diversion range by factors including endpoint user group, Internet access application, access domain name, source IP address range, destination IP address range, transmission protocol, and IP layer DSCP/TOS marking. It supports multiple load methods, including dynamic load (high-priority lines preferred), specified lines, load based on carrier, load based on line bandwidth, load based on residual bandwidth, and leased line backup based on VPN to improve the diversion effect.

Application Routing Technology

The Sangfor Internet access control adopts the application routing technology to implement an allocation mechanism to allocate the links based on factors including load situations of links, time range, user group, access objects, and accessed application types to improve the optimized usage links further.

Dynamic Diversion Technology

The Sangfor Internet access control adopts dynamic diversion technology. When the high-quality line is idle, other users and traffic also can go through it. When the line is busy, the traffic of non-important applications and non-important users will be diverted. The high-quality line guarantees the core users' and core applications' Internet access experience.

Routing Support Description

The routing and bridge modes support link load balancing, DSCP, and TOS marking.

Default load policy priority: Disable the default load policy and prefer to use the line with the highest usage priority, the load based on carrier, residual bandwidth, bandwidth ratio, and even load assignment.

Preferred load policy: It specifies lines, multi-line load, residual bandwidth, preferred usage of above lines, bandwidth ratio, even load assignment, and leased line backup based on VPN.