| Standard Deployment
Configuration: Barracuda Web Application Controllers are designed
to easily fit into any existing data center environment and to rapidly
secure and accelerate new and existing Web applications. Barracuda
Networks offers the most flexible array of Web Application Controller
deployment options, including both Bridge-path and Route-path.

Bridge-path:
Bridge-path, the recommended mode of implementation for most
customers with existing Web application traffic, enables simple
and fast deployment without requiring any IP address changes on
either the front- or back-end Web servers or network devices. The
bridge is transparent, so no user traffic is disrupted.
Route-path:
Route-path provides the highest degree of protection for a Web
application infrastructure by acting as a full reverse proxy for
all Web application traffic. As a reverse proxy, Route-path allows
only predefined traffic that adheres to security policies. Additionally,
the reverse proxy controls the only route to the back end network,
so traffic cannot flow to any server unless specifically forwarded
by the proxy. This is the most flexible deployment mode because
it facilitates the content based traffic management functions of
the Web Application Controller.
Multiple Network Environments:
A Barracuda Web Application Controller may be deployed to protect
multiple applications and multiple subnets supporting a combination
of Bridge-path or Route-path for different applications.

Fault Tolerant Barracuda Web Application Controller Environment:
Some organizations may need only a single Barracuda Web Application
Controller. When inline in Bridge-path, the Barracuda Web Application
Controller Ethernet Hard Bypass ensures reliable application delivery.
For Web applications with stringent security requirements, the Barracuda
Web Application Controller may be installed in a redundant pair
configuration, providing real-time application state replication
so that security and user sessions will not be compromised during
a failover event.

|