GITBOOK-745: No subject

Author: nhilth-vngcloud

English/vserver/compute-hcm03-1a/vpc/virtual-ip/public-virtual-ip-address-for-vmarketplace.md

@@ -24,7 +24,7 @@ Virtual IP is mainly used to:
 This document helps you:
 
 * Understand and use Virtual IP Address(es) on vMarketplace.
-* Use pfSense as an Internet Gateway.
+* Use pfSense or Palo Alto as an Internet Gateway.
 
 ## III. Implementation steps
 
@@ -153,7 +153,14 @@ You can also access the pfSense webGUI via this VIP.
 * **Active-Passive**: one firewall is active, one firewall is standby.
 * **Active-Active**: both firewalls are active (combined with load balancing).
 
-Currently, vMarketplace Virtual IP Address supports **Active-Passive**.
+**Recommended mode when selecting the firewall deployment model**
+
+* **pfSense**: choose **Active/Active**.
+* **Palo Alto**: choose **Active/Passive**.
+
+{% hint style="info" %}
+If you deploy **pfSense**, keep the marketplace deployment mode as **Active/Active**, then follow the VIP failover steps below for the public VIP layer.
+{% endhint %}
 
 **Traffic flow:** Internet → VIP (157.20.200.185) → Firewall VM 1 (NAT + Filter), Firewall VM 2 (NAT + Filter) → Server 1 (192.168.2.7), Server 2 (192.168.2.5)
 

English/vserver/compute-hcm03-1a/vpc/virtual-ip/vip-mode.md

@@ -6,6 +6,17 @@ When you design a VIP-based HA setup, you typically choose one mode: **Active/Ac
 
 Choosing the right mode affects architecture, performance, and cost.
 
+### Product recommendation on vMarketplace
+
+Use the mode below when you deploy firewall appliances on vMarketplace:
+
+* **pfSense**: choose **Active/Active**.
+* **Palo Alto**: choose **Active/Passive**.
+
+{% hint style="info" %}
+If you also use **Public Virtual IP Address** on vMarketplace, the HA VIP workflow currently runs in **Active-Passive** at the VIP layer.
+{% endhint %}
+
 ## 1. Active/Active Mode
 
 #### Definition