FreeRADIUS + LVS problem

[Nicolas Baradakis]

Alan DeKok wrote:

> Sam Schultz wrote:
>
> > I was thinking there may be some way to coerce FR into thinking
> > the load balancer is another radius server sending over proxied
> > requests, or something like that.
>
>   The simplest way to do that is (perhaps not surprisingly) to run
> FreeRADIUS as a proxy, doing RADIUS-aware load balancing.  Since that
> machine won't be doing authentication (DB's are slow), there's no reason
> it can't handle proxying 5k RADIUS requests/s.

I agree with Alan: if you want the features of a RADIUS proxy, just
setup FreeRADIUS as a proxy. I note alike the LVS servers, you can
have several RADIUS proxies in a pool and use Keepalived for failover.

Keepalived will monitor the FreeRADIUS proxies. The health check is
configured with a "MISC_CHECK" stanza in keepalived.conf. You have
to run "radclient" and test whether the server returns Access-Accept,
that's all.

-- 
Nicolas Baradakis