Hello In the coming days I will set up a freeradius server for access control and accounting. I've been looking for information on freeradius and high availability, since my idea is to have two servers in case one fails, continue to operate with the other, but I just found information. So I turn to the list, in case I can recommend someone with experience on stage. I do not know if it is feasible to have a server as master and one slave, when the main falls, the other up the interface. If there is some kind of balancer radius and use both servers, etc.. Any ideas?. Thank you very much. Best regards Anto
On 01/03/12 10:16, Anto wrote:
Hello
In the coming days I will set up a freeradius server for access control and accounting. I've been looking for information on freeradius and high availability, since my idea is to have two servers in case one fails, continue to operate with the other, but I just found information. So I turn to the list, in case I can recommend someone with experience on stage.
I do not know if it is feasible to have a server as master and one slave, when the main falls, the other up the interface. If there is some kind of balancer radius and use both servers, etc..
This is a very vague question. You're going to get a lot of either too-vague or too-specific answers. A few things you need to specify: 1. When you say "high availability" what are you hoping to achieve? 2. How long can you tolerate when an unscheduled outage for? 1 second or 60? 3. Do your RADIUS servers talk to external data sources (SQL, LDAP)? 4. Do you care about load-balancing, or just high-availability? I'll make a few comments: Most NASes support 2 (or more) RADIUS servers, and will fail over when they detect an outage. For resilience, you just need to build two RADIUS servers on different IPs, and specify these in your NAS. You don't need a load-balancer or other complications, and they will just make things less reliable. Making "redundant" RADIUS servers is easy; you just build two machines, and run FreeRADIUS on each with the same config. The "hard" bit is replicating any data sources between them (LDAP, SQL) and handling "writes" such as accounting packets into SQL, SQL session counters, and so on. You need to be more specific about what you're doing and what you want to achieve.
Hi, if your NAS does not support 2 radius servers you can use load balancer (ex fortinet). 01 марта 2012, 15:37 от Phil Mayers <p.mayers@imperial.ac.uk>:
On 01/03/12 10:16, Anto wrote:
Hello
In the coming days I will set up a freeradius server for access control and accounting. I've been looking for information on freeradius and high availability, since my idea is to have two servers in case one fails, continue to operate with the other, but I just found information. So I turn to the list, in case I can recommend someone with experience on stage.
I do not know if it is feasible to have a server as master and one slave, when the main falls, the other up the interface. If there is some kind of balancer radius and use both servers, etc..
This is a very vague question. You're going to get a lot of either too-vague or too-specific answers.
A few things you need to specify:
1. When you say "high availability" what are you hoping to achieve? 2. How long can you tolerate when an unscheduled outage for? 1 second or 60? 3. Do your RADIUS servers talk to external data sources (SQL, LDAP)? 4. Do you care about load-balancing, or just high-availability?
I'll make a few comments:
Most NASes support 2 (or more) RADIUS servers, and will fail over when they detect an outage. For resilience, you just need to build two RADIUS servers on different IPs, and specify these in your NAS.
You don't need a load-balancer or other complications, and they will just make things less reliable.
Making "redundant" RADIUS servers is easy; you just build two machines, and run FreeRADIUS on each with the same config. The "hard" bit is replicating any data sources between them (LDAP, SQL) and handling "writes" such as accounting packets into SQL, SQL session counters, and so on.
You need to be more specific about what you're doing and what you want to achieve. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Be careful with load balancers too. Some NAS don't work well through a load balancer (Trapeze wireless controllers). --J From: Толик Шавловский <tolik_shavlovsky@mail.ru<mailto:tolik_shavlovsky@mail.ru>> Reply-To: Толик Шавловский <tolik_shavlovsky@mail.ru<mailto:tolik_shavlovsky@mail.ru>>, FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Thu, 1 Mar 2012 17:52:29 +0400 To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re[2]: High Avaibility Hi, if your NAS does not support 2 radius servers you can use load balancer (ex fortinet). 01 марта 2012, 15:37 от Phil Mayers <p.mayers@imperial.ac.uk<mailto:p.mayers@imperial.ac.uk>>: On 01/03/12 10:16, Anto wrote: > Hello > > In the coming days I will set up a freeradius server for access > control and accounting. I've been looking for information on > freeradius and high availability, since my idea is to have two servers > in case one fails, continue to operate with the other, but I just > found information. So I turn to the list, in case I can recommend > someone with experience on stage. > > I do not know if it is feasible to have a server as master and one > slave, when the main falls, the other up the interface. If there is > some kind of balancer radius and use both servers, etc.. This is a very vague question. You're going to get a lot of either too-vague or too-specific answers. A few things you need to specify: 1. When you say "high availability" what are you hoping to achieve? 2. How long can you tolerate when an unscheduled outage for? 1 second or 60? 3. Do your RADIUS servers talk to external data sources (SQL, LDAP)? 4. Do you care about load-balancing, or just high-availability? I'll make a few comments: Most NASes support 2 (or more) RADIUS servers, and will fail over when they detect an outage. For resilience, you just need to build two RADIUS servers on different IPs, and specify these in your NAS. You don't need a load-balancer or other complications, and they will just make things less reliable. Making "redundant" RADIUS servers is easy; you just build two machines, and run FreeRADIUS on each with the same config. The "hard" bit is replicating any data sources between them (LDAP, SQL) and handling "writes" such as accounting packets into SQL, SQL session counters, and so on. You need to be more specific about what you're doing and what you want to achieve. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
If you are using mysql to store accounting and auth data the best solution is to have mysql cluster which is high available shared nothing DB (no need for any kind of shared storage ) with high performance ( 1 billion transaction as claimed ny oracle for the new version 7.2.4). By the way there is a white paper on using freeradiu with mysql cluster, you can find it in mysql website. On 2012 3 2 23:32, "McNutt, Justin M." <McNuttJ@missouri.edu> wrote: > Be careful with load balancers too. Some NAS don't work well through a > load balancer (Trapeze wireless controllers). > > --J > > From: Толик Шавловский <tolik_shavlovsky@mail.ru<mailto: > tolik_shavlovsky@mail.ru>> > Reply-To: Толик Шавловский <tolik_shavlovsky@mail.ru<mailto: > tolik_shavlovsky@mail.ru>>, FreeRadius users mailing list < > freeradius-users@lists.freeradius.org<mailto: > freeradius-users@lists.freeradius.org>> > Date: Thu, 1 Mar 2012 17:52:29 +0400 > To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org > <mailto:freeradius-users@lists.freeradius.org>> > Subject: Re[2]: High Avaibility > > Hi, > > if your NAS does not support 2 radius servers you can use load balancer > (ex fortinet). > > > > > 01 марта 2012, 15:37 от Phil Mayers <p.mayers@imperial.ac.uk<mailto: > p.mayers@imperial.ac.uk>>: > On 01/03/12 10:16, Anto wrote: > > Hello > > > > In the coming days I will set up a freeradius server for access > > control and accounting. I've been looking for information on > > freeradius and high availability, since my idea is to have two servers > > in case one fails, continue to operate with the other, but I just > > found information. So I turn to the list, in case I can recommend > > someone with experience on stage. > > > > I do not know if it is feasible to have a server as master and one > > slave, when the main falls, the other up the interface. If there is > > some kind of balancer radius and use both servers, etc.. > This is a very vague question. You're going to get a lot of either > too-vague or too-specific answers. > A few things you need to specify: > 1. When you say "high availability" what are you hoping to achieve? > 2. How long can you tolerate when an unscheduled outage for? 1 second > or 60? > 3. Do your RADIUS servers talk to external data sources (SQL, LDAP)? > 4. Do you care about load-balancing, or just high-availability? > I'll make a few comments: > Most NASes support 2 (or more) RADIUS servers, and will fail over when > they detect an outage. For resilience, you just need to build two RADIUS > servers on different IPs, and specify these in your NAS. > You don't need a load-balancer or other complications, and they will > just make things less reliable. > Making "redundant" RADIUS servers is easy; you just build two machines, > and run FreeRADIUS on each with the same config. The "hard" bit is > replicating any data sources between them (LDAP, SQL) and handling > "writes" such as accounting packets into SQL, SQL session counters, and > so on. > You need to be more specific about what you're doing and what you want > to achieve. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >
Hello Sorry for the delay in responding. Currently in the system I have two mysql servers configured as master-master. Freeradius world, totally not know, so I can not tell them if the configuration is "load-balancing" or just "high-availability". The software we have developed connects to an IP (radius server) can not specify more. Asked why, if you can mount a balancer in the ip and balance between other servers freeradius (detecting the fall), but would have to configure this balancer in HA. Or have two servers and one as slave (HA). As freeradius not know the world and I've searched, but have not found information, I wanted to know a little more the functioning of freeradius. Freeradius not know if flags or similar stored in memory, etc., then the slave would not have these states, etc.. After read, I have been a little more clear, to indicate to me that using two servers with two ips, might work. I thought it would be more complicated because states would keep in memory or the like. The part of the db (mysql) I have it resolved, the problem was with freeradius. I found this: http://wiki.freeradius.org/Fail-over http://wiki.freeradius.org/Load-balancing I try with what I have said. Thank you very much. Regards Anto 2012/3/3 hashim zayed <hashim.zayed@gmail.com>:
If you are using mysql to store accounting and auth data the best solution is to have mysql cluster which is high available shared nothing DB (no need for any kind of shared storage ) with high performance ( 1 billion transaction as claimed ny oracle for the new version 7.2.4). By the way there is a white paper on using freeradiu with mysql cluster, you can find it in mysql website.
On 2012 3 2 23:32, "McNutt, Justin M." <McNuttJ@missouri.edu> wrote:
Be careful with load balancers too. Some NAS don't work well through a load balancer (Trapeze wireless controllers).
--J
From: Толик Шавловский <tolik_shavlovsky@mail.ru<mailto:tolik_shavlovsky@mail.ru>> Reply-To: Толик Шавловский <tolik_shavlovsky@mail.ru<mailto:tolik_shavlovsky@mail.ru>>, FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Date: Thu, 1 Mar 2012 17:52:29 +0400 To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> Subject: Re[2]: High Avaibility
Hi,
if your NAS does not support 2 radius servers you can use load balancer (ex fortinet).
Hello
In the coming days I will set up a freeradius server for access control and accounting. I've been looking for information on freeradius and high availability, since my idea is to have two servers in case one fails, continue to operate with the other, but I just found information. So I turn to the list, in case I can recommend someone with experience on stage.
I do not know if it is feasible to have a server as master and one slave, when the main falls, the other up the interface. If there is some kind of balancer radius and use both servers, etc.. This is a very vague question. You're going to get a lot of either too-vague or too-specific answers. A few things you need to specify: 1. When you say "high availability" what are you hoping to achieve? 2. How long can you tolerate when an unscheduled outage for? 1 second or 60? 3. Do your RADIUS servers talk to external data sources (SQL, LDAP)? 4. Do you care about load-balancing, or just high-availability? I'll make a few comments: Most NASes support 2 (or more) RADIUS servers, and will fail over when they detect an outage. For resilience, you just need to build two RADIUS servers on different IPs, and specify these in your NAS. You don't need a load-balancer or other complications, and they will just make things less reliable. Making "redundant" RADIUS servers is easy; you just build two machines, and run FreeRADIUS on each with the same config. The "hard" bit is replicating any data sources between them (LDAP, SQL) and handling "writes" such as accounting packets into SQL, SQL session counters, and so on. You need to be more specific about what you're doing and what you want to achieve.
01 марта 2012, 15:37 от Phil Mayers <p.mayers@imperial.ac.uk<mailto:p.mayers@imperial.ac.uk>>: On 01/03/12 10:16, Anto wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (5)
-
Anto -
hashim zayed -
McNutt, Justin M. -
Phil Mayers -
Толик Шавловский