Hello Everyone: I am planning on deploying freeradius on a redundancy configuration. It will be runing under linux, and freeradius version is 3.0.4 In the simplest configuration, i would have two servers. Redundancy for the authentication database will be done via master-slave replication on the database side. I would like to implement redundancy on the accounting database using copy-acct-to-home-server.
From what i understand, i should be able to maintain identical copies of the accounting tables this way, and i would be able to accomplish simultaneous use check, which would be desirable.
Now, first of all, each of the servers have a local accounting database, and i am writing to the database using an sql_buffered server. This works great. Now, reading through the forums, i understand that having several readers reading on the same accounting file can bring unpredictable results, is this the case? In that case, can these two functions work together? Also is this kind of configuration scalable to more than two servers? I am wondering how can i configure each server to send the packets to 2 or more different servers at the same time (In the case i would like to increase to 3 servers, or even more) Any comments or recommendations would be appreciated. Regards!
On May 21, 2015, at 9:20 PM, Ricardo Larrañaga <ricardo.larranaga@gmail.com> wrote:
I would like to implement redundancy on the accounting database using copy-acct-to-home-server. From what i understand, i should be able to maintain identical copies of the accounting tables this way, and i would be able to accomplish simultaneous use check, which would be desirable.
Sure, that's fine.
Now, first of all, each of the servers have a local accounting database, and i am writing to the database using an sql_buffered server. This works great.
Good.
Now, reading through the forums, i understand that having several readers reading on the same accounting file can bring unpredictable results, is this the case? In that case, can these two functions work together?
Yes. You just need to have TWO detail files. Each accounting packet goes into two detail files. The copy-to-home-server configuration reads one. The buffered SQL one reads the second.
Also is this kind of configuration scalable to more than two servers? I am wondering how can i configure each server to send the packets to 2 or more different servers at the same time (In the case i would like to increase to 3 servers, or even more)
That can be done. Just write multiple detail files, one for each destination. It's not perfect, but it does work. Alan DeKok.
Hi Alan, thanks for the answer. One more questions, is it possible to create a detail file per listening port? If it is, that would let you proxy accounting without having to write logic to segregate real nas from radius severs proxying, right? Thanks. Regards On Fri, May 22, 2015 at 10:46 AM, Alan DeKok <aland@deployingradius.com> wrote:
On May 21, 2015, at 9:20 PM, Ricardo Larrañaga < ricardo.larranaga@gmail.com> wrote:
I would like to implement redundancy on the accounting database using copy-acct-to-home-server. From what i understand, i should be able to maintain identical copies of the accounting tables this way, and i would be able to accomplish simultaneous use check, which would be desirable.
Sure, that's fine.
Now, first of all, each of the servers have a local accounting database, and i am writing to the database using an sql_buffered server. This works great.
Good.
Now, reading through the forums, i understand that having several readers reading on the same accounting file can bring unpredictable results, is this the case? In that case, can these two functions work together?
Yes. You just need to have TWO detail files. Each accounting packet goes into two detail files. The copy-to-home-server configuration reads one. The buffered SQL one reads the second.
Also is this kind of configuration scalable to more than two servers? I am wondering how can i configure each server to send the packets to 2 or more different servers at the same time (In the case i would like to increase to 3 servers, or even more)
That can be done. Just write multiple detail files, one for each destination. It's not perfect, but it does work.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On May 22, 2015, at 3:17 PM, Ricardo Larrañaga <ricardo.larranaga@gmail.com> wrote:
One more questions, is it possible to create a detail file per listening port?
Yes.
If it is, that would let you proxy accounting without having to write logic to segregate real nas from radius severs proxying, right?
I would suggest using virtual servers for that. Use one virtual server for the NAS, and a different one for the proxy which reads from the detail file. This is how the examples are set up. Alan DeKok.
participants (2)
-
Alan DeKok -
Ricardo Larrañaga