Re: How to cache the EAP-TLS session-state in redis

On Jun 17, 2024, at 4:33 AM, James Fan <polysorb@gmail.com> wrote:

If we have multiple FreeRADIUS server instances with a load balancer in front of them, how do we ensure the TLS session is successful?

Configure the load balancer to send all packets for the same TLS session to the same back-end server. That's what Arran said in his reply to you.

The handshake requests will be sent to different servers, which will cause the session mismatching issue.

Exactly.

Do we need to use the load balancer settings, or is the FreeRADIUS server able to handle this?

Configure the load balancer correctly. Alan DeKok.