VDI load balancing for production controller clusters

Why VDI estates need a purpose-built load balancer

Virtual desktop infrastructure puts steady pressure on the control plane: workspace catalog requests, session broker traffic, HTML5 gateway paths, and admin APIs all converge on a small set of controller nodes. When you run controllers in an active/active or active/passive HA pair, users must reach a healthy node — and failover must be invisible enough that sessions and entitlements stay consistent.

Generic load balancers can terminate TLS and forward TCP, but VDI deployments benefit from an application delivery controller (ADC) that understands the edge role in front of brokers, gateways, and portals. Veloxward ADC is that edge: a single appliance that terminates HTTPS, balances traffic across your Veloxward VDI controller tier, and sits alongside VPN and clientless access in one operational surface.

What Veloxward ADC load balancing delivers

• Health-aware routing — traffic goes to controllers that pass health checks, supporting HA failover during maintenance or node loss.
• TLS termination at the edge — certificates and HTTPS policy live on the ADC, simplifying controller placement inside the trust zone.
• WAF protection — web application firewall rules guard admin and portal paths exposed to users and operators.
• Unified edge operations — load balancing shares the same appliance as WireGuard VPN and Internet Gateway clientless access, reducing tool sprawl.

Typical production topology

Remote users connect to Veloxward ADC at the network boundary. The ADC load-balances to two or more VDI controller VMs running PostgreSQL-backed broker and portal services. Session hosts and hypervisors sit behind the control plane; the ADC never replaces brokering — it ensures the control plane is reachable, resilient, and consistently secured.

This pattern maps cleanly to on-premises and private cloud estates on Proxmox, VMware, or Hyper-V, where teams already operate their own VLANs, firewalls, and certificate workflows.

ADC + VDI: clear integration boundary

Veloxward ADC handles the network edge (TLS, load balancing, VPN, clientless web). Veloxward VDI runs the control plane (catalog, entitlements, session broker, HTML5 gateway brokering). Shared Active Directory or LDAP and optional JWT trust tie the two products together. See the FAQ for integration details.