Pleasant surprise at how much I ended up like the LoadMaster
May 20, 2019

Pleasant surprise at how much I ended up like the LoadMaster

Anonymous | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User

Overall Satisfaction with Kemp LoadMaster

Our Kemp Loadmaster is utilized in a multi-domain environment and communicates with multiple VLANs to Load Balance traffic to servers in different DMZs. In situations where removing insecure Protocols, ciphers, and hashes from web servers cannot be done on the server itself, traffic is routed through the KEMP Loadmaster and weak Protocols, ciphers, and hashes are rejected at the Load Balancer.
  • Loadmasters run in Active-Standby. This allows me to upgrade the Standby member, fail-over to it, then upgrade the old primary member. 100% uptime.
  • I can route load balanced traffic to a single server in a pair and perform daytime updates/patches on servers without causing service interruption.
  • Security updates come out regularly, to keep up with CVEs.
  • LoadMaster is regex in its context rules, this allows for some very granular configurations to load balance traffic.
  • Can load balance traffic based on port numbers, allowing for non-http(s) to be load balanced.
  • Load balancing SFTP traffic is done poorly and requires the SFTP to have its default gateway set to the LoadMaster.
  • RADIUS authentication is the only allowed SSO and you must still manually configure each user on the LoadMaster.
  • configuration can be a little confusing when getting started. Had issues getting it to recognize SSL during setup, support informed me that SSL required "Super HTTP" setting.
  • We would have failed a security audit if I hadn't used the KEMP to remove some weak security protocols.
  • Being able to logically bring down load-balanced servers behind the KEMP has allowed for use to patch/update servers anytime.
  • Loadmaster supports multi domain environments, so we don't need to make additional purchases when a new domain is turned up.
KEMP Loadmaster was chosen by the VP for reduced price alone. I was thoroughly against it in the beginning (as I was a hugh F5 supporter) until i got used to it.
For a much reduced price, it performs just as well as a F5; after you get used to the WebUI configuration tool.
Hiding web servers (even single web servers) behind it to reject weak security protocols. Forcing re-direction from HTTP to HTTPS. User community is very helpful, but there is a Kemp employee on the site that is very rude. SFTP Load Balancing still needs work.