Hi, I am new to freeradius. I wantto implement load balancing on freeradius servers (not on backend database). I want that if a bulk of requests are received, these requests should be distributed evenly among multiple freeradius servers. Can any one please tell me, how could i achieve this goal. Thanks in advance
Muhammad Nadeem wrote:
Hi, I am new to freeradius. I wantto implement load balancing on freeradius servers (not on backend database). I want that if a bulk of requests are received, these requests should be distributed evenly among multiple freeradius servers. Can any one please tell me, how could i achieve this goal.
The documentation is clear. Load-balancing is simple to configure. It's documented in proxy.conf. My guess is your test is wrong. You're probably sending packets in *series*. The latency added by a proxy slows down series, so that it takes longer. If you send packets in parallel, you would see a higher latency for each packet, but the ability to process more packets per second. You've admitted to not knowing much about RADIUS. If the test doesn't do what you expect, the obvious conclusion is to blame the test, not FreeRADIUS. Alan DeKok.
thanx alan,, I have configured a proxy server using documentation of 'proxy.conf'. which is proxying requests to 2 home_servers. Yes you are right, may b the tool which I am using (Radius NT client) sending requests in series. I tried to use Rad Client to send requests in Parallel, but i wasn't succeed. Could you please help me out to send parallel requests to proxy server??? Bundle of thanks in advance :) On Tue, Feb 12, 2013 at 7:19 PM, Alan DeKok <aland@deployingradius.com>wrote:
Muhammad Nadeem wrote:
Hi, I am new to freeradius. I wantto implement load balancing on freeradius servers (not on backend database). I want that if a bulk of requests are received, these requests should be distributed evenly among multiple freeradius servers. Can any one please tell me, how could i achieve this goal.
The documentation is clear. Load-balancing is simple to configure. It's documented in proxy.conf.
My guess is your test is wrong. You're probably sending packets in *series*. The latency added by a proxy slows down series, so that it takes longer.
If you send packets in parallel, you would see a higher latency for each packet, but the ability to process more packets per second.
You've admitted to not knowing much about RADIUS. If the test doesn't do what you expect, the obvious conclusion is to blame the test, not FreeRADIUS.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Best Regards Muhammad Nadeem Muhammad Ali Jinnah University
Muhammad Nadeem wrote:
thanx alan,, I have configured a proxy server using documentation of 'proxy.conf'. which is proxying requests to 2 home_servers. Yes you are right, may b the tool which I am using (Radius NT client) sending requests in series.
Then the test doesn't mean anything.
I tried to use Rad Client to send requests in Parallel, but i wasn't succeed. Could you please help me out to send parallel requests to proxy server???
There aren't many good tools available. I did have a tool on the corporate web site (radperf), but that's been taken down for various reasons. You can always use commercial traffic generators. Alan DeKok.
There aren't many good tools available. I did have a tool on the corporate web site (radperf), but that's been taken down for various reasons.
You can always use commercial traffic generators.
We're a Java group and we use Jmeter with a home-written sampler that uses TinyRadius client.
thanx alan.. But i searching around on web i came to know that radclient can also be used for load testing. But when i use this with -p (to send requests in parallel), it only send one packet. here is the command out put [root@billing ~]# echo "User-Name=001AAD3F8165, NAS-IP-Address=10.192.100.4"|radclient -p 100 192.168.0.102 auth testing123 -x Sending Access-Request of id 120 to 192.168.0.102 port 1812 User-Name = "001AAD3F8165" NAS-IP-Address = 10.192.100.4 rad_recv: Access-Accept packet from host 192.168.0.102 port 1812, id=120, length=143 Qos-Policing-Profile-Name = "128K_UL" Qos-Metering-Profile-Name = "512K_DL" Context-Name = "Postpaid-VR" DHCP-Max-Leases = 1 Forward-Policy = "in:nonpayment_redirect_post" HTTP-Redirect-Profile-Name = "nonpayment_redirect" why dont -p sends requests in parallel ????? On Tue, Feb 12, 2013 at 7:45 PM, Alan DeKok <aland@deployingradius.com>wrote:
Muhammad Nadeem wrote:
thanx alan,, I have configured a proxy server using documentation of 'proxy.conf'. which is proxying requests to 2 home_servers. Yes you are right, may b the tool which I am using (Radius NT client) sending requests in series.
Then the test doesn't mean anything.
I tried to use Rad Client to send requests in Parallel, but i wasn't succeed. Could you please help me out to send parallel requests to proxy server???
There aren't many good tools available. I did have a tool on the corporate web site (radperf), but that's been taken down for various reasons.
You can always use commercial traffic generators.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Best Regards Muhammad Nadeem Muhammad Ali Jinnah University
On Wed, Feb 13, 2013 at 4:33 PM, Muhammad Nadeem <mnadeem8327@gmail.com> wrote:
for load testing. But when i use this with -p (to send requests in parallel), it only send one packet. here is the command out put [root@billing ~]# echo "User-Name=001AAD3F8165, NAS-IP-Address=10.192.100.4"|radclient -p 100 192.168.0.102 auth
why dont -p sends requests in parallel ?????
Because you only feed it one request. Feed it a file which contains multiple request (read the manual/doc). -- Fajar
On 2013/02/12 04:45 PM, Alan DeKok wrote:
I tried to use Rad Client to send requests in Parallel, but i wasn't succeed. Could you please help me out to send parallel requests to proxy server???
Am I missing something, or can you not simply run more than once instance of radclient on more than one console? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 -------------------- Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html
thanx john: yes i can run many instances of radclient. But i want on instance of radclient, that can send parallel requests to radius server. On Wed, Feb 13, 2013 at 12:56 PM, Johan Meiring <jmeiring@pcservices.co.za>wrote:
On 2013/02/12 04:45 PM, Alan DeKok wrote:
I tried to use Rad Client to send requests in Parallel, but i wasn't
succeed. Could you please help me out to send parallel requests to proxy server???
Am I missing something, or can you not simply run more than once instance of radclient on more than one console?
--
Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782
-------------------- Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at:
http://www.pcservices.co.za/**disclaimer.html<http://www.pcservices.co.za/disclaimer.html>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/** list/users.html <http://www.freeradius.org/list/users.html>
-- Best Regards Muhammad Nadeem Muhammad Ali Jinnah University
On 13.02.2013 09:03, Muhammad Nadeem wrote:
thanx john: yes i can run many instances of radclient. But i want on instance of radclient, that can send parallel requests to radius server.
simply use echo "User-Name=001AAD3F8165, NAS-IP-Address=10.192.100.4"|radclient -p 100 -c 10000 192.168.0.102 auth testing123 -x man radclient -c count Send each packet count times. Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier@heliosnet.org
will it send 10000 parallel requests to free radius server???? why not simply use -c 10000, instead of -p 100 -c 10000. What will be the difference??? Thanks On Wed, Feb 13, 2013 at 1:16 PM, Olivier Beytrison <olivier@heliosnet.org>wrote:
On 13.02.2013 09:03, Muhammad Nadeem wrote:
thanx john: yes i can run many instances of radclient. But i want on instance of radclient, that can send parallel requests to radius server.
simply use echo "User-Name=001AAD3F8165, NAS-IP-Address=10.192.100.4"|radclient -p 100 -c 10000 192.168.0.102 auth testing123 -x
man radclient -c count Send each packet count times.
Olivier --
Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier@heliosnet.org - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Best Regards Muhammad Nadeem Muhammad Ali Jinnah University
I used -c 10000, and omit -p,, result was the same . 10000 users were authenticated in 23 seconds :) . So i think no difference of using -p and -c together ?? M I right?????? On Wed, Feb 13, 2013 at 1:32 PM, Muhammad Nadeem <mnadeem8327@gmail.com>wrote:
will it send 10000 parallel requests to free radius server???? why not simply use -c 10000, instead of -p 100 -c 10000. What will be the difference??? Thanks
On Wed, Feb 13, 2013 at 1:16 PM, Olivier Beytrison <olivier@heliosnet.org>wrote:
On 13.02.2013 09:03, Muhammad Nadeem wrote:
thanx john: yes i can run many instances of radclient. But i want on instance of radclient, that can send parallel requests to radius server.
simply use echo "User-Name=001AAD3F8165, NAS-IP-Address=10.192.100.4"|radclient -p 100 -c 10000 192.168.0.102 auth testing123 -x
man radclient -c count Send each packet count times.
Olivier --
Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier@heliosnet.org - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Best Regards Muhammad Nadeem Muhammad Ali Jinnah University
-- Best Regards Muhammad Nadeem Muhammad Ali Jinnah University
On 13.02.2013 09:38, Muhammad Nadeem wrote:
I used -c 10000, and omit -p,, result was the same . 10000 users were authenticated in 23 seconds :) . So i think no difference of using -p and -c together ?? M I right??????
Well yeah -p works only with a file (-f) so, feed your request multiple time to a file : for d in {1..10000} ; do echo -e "User-Name=001AAD3F8165\nNAS-IP-Address=10.192.100.4\n" >> rad-requests.txt ; done (there need to be a empty line between request, hence the extra \n at the end) Send the requests, 100 at a time, and repeat 10 times radclient -c 10 -p 100 -f rad-requests.txt server:port auth secret Tested it here and works very well Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier@heliosnet.org
ok, I followed your process. i make a file with User-Name and NAS-IP-Address attribute. and issue the following command radclient -c 10 -p 1000 -f radrequest.txt 192.168.0.112 auth testing123 But i only receive 10 "access-accept" packets. So what does it mean?? If upper command issues 1000 requests 10 times, so their should be 10000 "access-accept" packets?? So please tell me where things are going worse :( On Wed, Feb 13, 2013 at 2:37 PM, Olivier Beytrison <olivier@heliosnet.org>wrote:
On 13.02.2013 09:38, Muhammad Nadeem wrote:
I used -c 10000, and omit -p,, result was the same . 10000 users were authenticated in 23 seconds :) . So i think no difference of using -p and -c together ?? M I right??????
Well yeah -p works only with a file (-f)
so, feed your request multiple time to a file : for d in {1..10000} ; do echo -e "User-Name=001AAD3F8165\nNAS-IP-Address=10.192.100.4\n" >> rad-requests.txt ; done
(there need to be a empty line between request, hence the extra \n at the end)
Send the requests, 100 at a time, and repeat 10 times
radclient -c 10 -p 100 -f rad-requests.txt server:port auth secret
Tested it here and works very well
Olivier --
Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier@heliosnet.org - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Best Regards Muhammad Nadeem Muhammad Ali Jinnah University
On 13.02.2013 11:45, Muhammad Nadeem wrote:
ok, I followed your process. i make a file with User-Name and NAS-IP-Address attribute. and issue the following command radclient -c 10 -p 1000 -f radrequest.txt 192.168.0.112 auth testing123 But i only receive 10 "access-accept" packets. So what does it mean?? If upper command issues 1000 requests 10 times, so their should be 10000 "access-accept" packets?? So please tell me where things are going worse :(
This mean your text file contains only one packet. Check the content of radrequest.txt. there should be 30002 lines ... and each packet should be seperated by an blank line. -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier@heliosnet.org
thanks a lot olivier... This stuff really worked for me.. cheers On Wed, Feb 13, 2013 at 4:05 PM, Olivier Beytrison <olivier@heliosnet.org>wrote:
On 13.02.2013 11:45, Muhammad Nadeem wrote:
ok, I followed your process. i make a file with User-Name and NAS-IP-Address attribute. and issue the following command radclient -c 10 -p 1000 -f radrequest.txt 192.168.0.112 auth testing123 But i only receive 10 "access-accept" packets. So what does it mean?? If upper command issues 1000 requests 10 times, so their should be 10000 "access-accept" packets?? So please tell me where things are going worse :(
This mean your text file contains only one packet. Check the content of radrequest.txt. there should be 30002 lines ... and each packet should be seperated by an blank line.
--
Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier@heliosnet.org - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Best Regards Muhammad Nadeem Muhammad Ali Jinnah University
On Wed, Feb 13, 2013 at 1:42 AM, Muhammad Nadeem <mnadeem8327@gmail.com> wrote:
Could you please help me out to send parallel requests to proxy server???
Try radclient (see "-p"): http://linux.die.net/man/1/radclient Alternatively, try radperf: http://networkradius.com/radperf.html -- Fajar
Athanx Fajar Actually Rad perf is not available on website. And i also used -p with radclient. But it didnot sent requests in parallel. On Wed, Feb 13, 2013 at 1:30 PM, Fajar A. Nugraha <list@fajar.net> wrote:
On Wed, Feb 13, 2013 at 1:42 AM, Muhammad Nadeem <mnadeem8327@gmail.com> wrote:
Could you please help me out to send parallel requests to proxy server???
Try radclient (see "-p"): http://linux.die.net/man/1/radclient
Alternatively, try radperf: http://networkradius.com/radperf.html
-- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Best Regards Muhammad Nadeem Muhammad Ali Jinnah University
hi,
I want that if a bulk of requests are received, these requests should be distributed evenly among multiple freeradius servers.
in proxy.conf, ensure that you have a suitable load-balance type defined for the target servers - be aware that some types do not operate with EAP...as the whole conversation needs to go to the same backend server. I would recommend reading more of the FreeRADIUS documentation alan
participants (7)
-
A.L.M.Buxey＠lboro.ac.uk -
adrian.p.smith＠bt.com -
Alan DeKok -
Fajar A. Nugraha -
Johan Meiring -
Muhammad Nadeem -
Olivier Beytrison