Re: free radius behind a load balancer?

On Jan 14, 2021, at 10:39 AM, Coy Hile <coy.hile@coyhile.com> wrote:

Has anyone tried putting the FreeRADIUS server behind a load balancer? I see dynamic-clients does queries based on the Packet-Src-IP-Address, but can one reasonably do similar based on NAS-IP-Address (assuming that the client sends that attribute?

Lots of people put it behind a load balancer. The only real caveat is that if you're doing EAP, the load balancer has to be aware of that. And then load balance on things like the User-Name, instead of randomly spamming packets across the back-ends. IIRC things like the F5 load balancers don't do that. But FreeRADIUS as a load balancer will do that. :) Alan DeKok.