<div dir="ltr">Hi LLiya,<div><br></div><div>It is very helpful. We will implement our converter module as you mentioned above.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Nov 24, 2014 at 12:28 PM, Iliya Peregoudov <span dir="ltr"><<a href="mailto:iperegudov@cboss.ru" target="_blank">iperegudov@cboss.ru</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 22.11.2014 18:01, srithar jeevadurai wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi LLiya,<br>
<br>
Thanks for your reply.<br>
<br>
If I understand your reply correctly. Our current implementation is like<br>
radius worker thread calls our customized module of Radius (rlm_raddia)<br>
to send request to diameter client (dia client will send the request to<br>
IN and reponse will be sent back to radius thread from dia client). It<br>
is a blocking call of Radius worker thread.<br>
</blockquote>
<br></span>
Yes, your current implementation uses custom freeradius module that implements in-house protocol client. All freeradius modules are blocking and your module is not an exception.<span class=""><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
If we implement, radius server as proxy then it will take request from<br>
NAS and send it to dia client (without waiting for response from dia<br>
client) which is non blocking call of radius worker thread. Dia client<br>
has to send response to radius server and radius server to send the<br>
repsonse to NAS. The only change here is rad-worker thread is no need to<br>
wait after sending request to dia client. Sending request and processing<br>
respose from dia client will happen idependedlly by FreeRad.<br>
</blockquote>
<br></span>
Yes, RADIUS proxy functionality of freeradius is non-blocking.<span class=""><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
If my above understanding is correct, Can we get a sample module code to<br>
send radius request to external process (here it is dia client) and<br>
process response from external process (idependedlly without waiting<br>
req-res). I hope that we would have used any IPC like TCP/IP or message<br>
queue etc.<br>
</blockquote>
<br></span>
RADIUS proxy functionality does not need any freeradius module. RADIUS proxy functionality is already implemented in freeradius core. RADIUS proxy functionality sends RADIUS requests to external RADIUS server (called "home" server). If your preacct section sets control:Proxy-To-Realm attribute for the accounting request received by freeradius from NAS, freeradius core will proxy this accounting request to the home server associated with designated realm. When the answer comes from home server freeradius core will proxy this answer back to the NAS.<br>
<br>
Example configuration of freeradius proxy:<br>
<br>
# raddb/proxy.conf<br>
home_server radius-diameter-translator-1 {<br>
type = acct<br>
ipaddr = 127.0.0.1<br>
port = 4013<br>
secret = secret<br>
response_window = 3<br>
no_response_fail = yes<br>
zombie_period = 86400 # 1 day<br>
revive_interval = 0<br>
status_check = none<br>
}<br>
home_server_pool radius-diameter-translator {<br>
home_server = radius-diameter-translator-1<br>
}<br>
realm radius-diameter-translator {<br>
acct_pool = radius_diameter_translator<br>
}<br>
<br>
# raddb/sites-available/default<br>
...<br>
preacct {<br>
# Proxy all Accounting-Requests to radius-diameter-translator realm<br>
update control {<br>
Proxy-To-Realm := radius-diameter-translator<br>
}<br>
}<br>
...<br>
<br>
Your radius-diameter-translator module should listen RADIUS protocol on UDP/4013 port. Translator should implement RADIUS server (receive requests, send responses) and Diameter client (send requests, receive answers). Flow diagram is following:<br>
<br>
<br>
NAS radiusd r-d-t diameter-server<br>
| | | |<br>
|RADIUS ACR | | |<br>
|------------>|RADIUS ACR | |<br>
| |------------>|Diameter ACR |<br>
| | |-------------->|<br>
| | | Diameter ACA|<br>
| | RADIUS ACA|<--------------|<br>
| RADIUS ACA|<------------| |<br>
|<------------| | |<span class=""><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I need to know how to start with proxy radius server impementation for<br>
radius-diameter converter. It would be great if you can give me a<br>
document link on the same please.<br>
</blockquote>
<br></span>
Proxy functionality is documented in raddb/proxy.conf.<div class="HOEnZb"><div class="h5"><br>
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/<u></u>list/users.html</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature">Regards,<br>Srithar Durairaj<br>Alternate Mail I.D: <a href="mailto:srijeevadurai1@yahoo.co.in">srijeevadurai1@yahoo.co.in</a><br>Mobile: +919886251852<br><br><br></div>
</div>