Radius Load-Balancing concept
Hi, we're planing to reinstall our Radius servers. Currently we have two servers running, each with an own mysql server for the accounting records. If server 1 fails server 2 takes over. The accounting data is exchange with radrelay, I'm thinking to switch from this fail-over concept to a load-balancing concept and I would like to ask, if this concept would work. I want to install 2 radius servers and a postgres database cluster. Both radius servers will write their accounting data into the same database. Some of our NASes will use the first, the others the second server as primary radius server. If one of the server fails the other server will take over all NASes. Does it work, if both servers will write into the same database? Do I need to set up radrelay to exchange the accounting data between the two servers? Will this concept work in general? Thanks in advance Regards Sebastian
Hey Sebastian, I think that you are making a rather not too complicated task very complicated with your view of the clustered solution. First you should decide what you want to load balance, the freeradius servers, the database servers or both? I also don't understand the need for some NASes conversing with one freeradius server and others conversing with another one. Goodluck. Liran. On Jan 3, 2008 12:31 PM, Sebastian Ganschow <sebastian@ganschow.name> wrote:
Hi,
we're planing to reinstall our Radius servers. Currently we have two servers running, each with an own mysql server for the accounting records. If server 1 fails server 2 takes over. The accounting data is exchange with radrelay,
I'm thinking to switch from this fail-over concept to a load-balancing concept and I would like to ask, if this concept would work.
I want to install 2 radius servers and a postgres database cluster. Both radius servers will write their accounting data into the same database. Some of our NASes will use the first, the others the second server as primary radius server. If one of the server fails the other server will take over all NASes.
Does it work, if both servers will write into the same database? Do I need to set up radrelay to exchange the accounting data between the two servers? Will this concept work in general?
Thanks in advance
Regards Sebastian
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
hi, thanks for your quick answer. On Thu, January 3, 2008 11:39, liran tal wrote:
First you should decide what you want to load balance, the freeradius servers, the database servers or both?
I'd like to load balance both. Or isn't their any need for? Important is that the database is clustered (fail-over).
I also don't understand the need for some NASes conversing with one freeradius server and others conversing with another one.
My idea was to split the load in this way. But the most important thing for me is, if I get any trouble if both radius servers will write their accounting records into the same database. Sebastian
Hey Sebastian, I am unsure what your end goal is but consider the following: The FreeRADIUS serves will be load balanced by something like LVS, where you'd have a single IP address shared by both servers, requests will go through either of them (not both). Or you can go for the fail-over situation where you have a "main" freeradius server and if it goes offline for some reason all the traffic goes to the other one. For the database servers you can do the same. Regards, Liran. On Jan 3, 2008 11:57 AM, Sebastian Ganschow <sebastian@ganschow.name> wrote:
hi,
thanks for your quick answer.
On Thu, January 3, 2008 11:39, liran tal wrote:
First you should decide what you want to load balance, the freeradius servers, the database servers or both?
I'd like to load balance both. Or isn't their any need for? Important is that the database is clustered (fail-over).
I also don't understand the need for some NASes conversing with one freeradius server and others conversing with another one.
My idea was to split the load in this way.
But the most important thing for me is, if I get any trouble if both radius servers will write their accounting records into the same database.
Sebastian
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I'm doing this with no problem. I have 2 freeradius servers both writing/reading the same dbms I have split my load up so some NASes use one radiusd as a primary and the other as the secondary. Then reversed that role for other NASes. It gives a nice balance and if one were to fail, they just query the one left standing. -----Original Message----- From: freeradius-users-bounces+duanec=mail.illicom.net@lists.freeradius.org [mailto:freeradius-users-bounces+duanec=mail.illicom.net@lists.freeradius.or g] On Behalf Of Sebastian Ganschow Sent: Thursday, January 03, 2008 4:31 AM To: freeradius-users@lists.freeradius.org Subject: Radius Load-Balancing concept Hi, we're planing to reinstall our Radius servers. Currently we have two servers running, each with an own mysql server for the accounting records. If server 1 fails server 2 takes over. The accounting data is exchange with radrelay, I'm thinking to switch from this fail-over concept to a load-balancing concept and I would like to ask, if this concept would work. I want to install 2 radius servers and a postgres database cluster. Both radius servers will write their accounting data into the same database. Some of our NASes will use the first, the others the second server as primary radius server. If one of the server fails the other server will take over all NASes. Does it work, if both servers will write into the same database? Do I need to set up radrelay to exchange the accounting data between the two servers? Will this concept work in general? Thanks in advance Regards Sebastian - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hey Duane, On Jan 3, 2008 4:31 PM, Duane Cox <duanec@mail.illicom.net> wrote:
I'm doing this with no problem.
I have 2 freeradius servers both writing/reading the same dbms
In a case where the entire transaction goes through one server it's ok, but if it gets split up through the two of them, then I'm not sure what will be the outcome. Regards, Liran.
Hi, load-balancing between the radius servers is not necessarily needed. I think the servers we're going to by will be capable to manage all dialin accounts. So the radius servers will be in fail over mode. If the first one is up, all requests will be handled by it. If it fails, the second one will take over. But will I get any trouble if both servers write their accounting data into the same database? Do I need to setup radrelay? Is the second radius server able to take over if radrelay isn't running? Regards Sebastian On Thu, January 3, 2008 22:54, liran tal wrote:
Hey Duane,
On Jan 3, 2008 4:31 PM, Duane Cox <duanec@mail.illicom.net> wrote:
I'm doing this with no problem.
I have 2 freeradius servers both writing/reading the same dbms
In a case where the entire transaction goes through one server it's ok, but if it gets split up through the two of them, then I'm not sure what will be the outcome.
Regards, Liran. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
But will I get any trouble if both servers write their accounting data into the same database?
No.
Do I need to setup radrelay? Is the second radius server able to take over if radrelay isn't running?
Yes, it will take over as NAS starts sending packets to it. No need for radrelay. Ivan Kalik Kalik Informatika ISP
People, I have several radius severs who have configurated the same databases. As you said radius service has a fail-over when they connect to DB and the first one fails. However, the main problem that I see in your configuration is the concurrency of database access. If you, at least, has two DB servers, both DB have to have the same data. So you have to solve the access concurrency firstly.> Date: Fri, 4 Jan 2008 10:20:44 +0100> Subject: Re: Radius Load-Balancing concept> From: sebastian@ganschow.name> To: freeradius-users@lists.freeradius.org> > Hi,> > load-balancing between the radius servers is not necessarily needed. I> think the servers we're going to by will be capable to manage all dialin> accounts.> > So the radius servers will be in fail over mode. If the first one is up,> all requests will be handled by it. If it fails, the second one will take> over.> > But will I get any trouble if both servers write their accounting data> into the same database?> > Do I need to setup radrelay? Is the second radius server able to take over> if radrelay isn't running?> > Regards> Sebastian> > On Thu, January 3, 2008 22:54, liran tal wrote:> > Hey Duane,> >> > On Jan 3, 2008 4:31 PM, Duane Cox <duanec@mail.illicom.net> wrote:> >> >> I'm doing this with no problem.> >>> >> I have 2 freeradius servers both writing/reading the same dbms> >>> >> > In a case where the entire transaction goes through one server it's ok,> > but if it gets split up through the two of them, then I'm not sure what> > will be the outcome.> >> > Regards,> > Liran.> > -> > List info/subscribe/unsubscribe? See> > http://www.freeradius.org/list/users.html> > > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _________________________________________________________________ MSN Video. http://video.msn.com/?mkt=es-es
participants (5)
-
Duane Cox -
liran tal -
Santiago Balaguer García -
Sebastian Ganschow -
tnt＠kalik.co.yu