Informations about home_server_pool with load-balancing or fail-over
Geaaru
geaaru at gmail.com
Sun Jul 26 23:21:33 CEST 2015
Hereinafter my comments. Thanks again for reply.
I also add another question...
7) Is there a variable to use on detail log to identify Ip address of
home_server used (from a pool) for example on a load-balancing proxy
scenario ?
Ah, fyi... I see that on freeradius site homepage link to unlang keywords
are broken for version 3.0.9 (available path is for version 3.0.8).
2015-07-25 14:12 GMT+02:00 Alan DeKok <aland at deployingradius.com>:
> On Jul 24, 2015, at 7:56 PM, Geaaru <geaaru at gmail.com> wrote:
> > I see freeradius documentation but I have some doubt about how
> > load-balancing/fail-over it works when is enable status-server or not.
> >
> > 1) From documentation I see that an home_server_pool with load-balancing
> > split requests between all home server. But FWIK or I understand if
> request
> > doesn't receive a response from first home_server is not send to second
> > like for fail-over. Is this correct ?
>
> No.
>
> The proxy fails over when:
>
> a) the home server is marked dead, and then
>
> b) the NAS sends another packet.
>
> If the NAS doesn't send another packet, the proxy will not be able to
> fail over *for that packet* to another home server. The *next packet* will
> see that the home server is down, and the proxy will choose another home
> server
Ok. While with fail-over type on proxy failure sequence is:
a) the home server is marked dead
b) proxy send packet to second home server with status alive/unknow without
wait for a re-transmission from NAS.
Is correct ?
>
> > 3) About status-server check... In my configuration I set status_server
> to
> > yes under security section but If I haven't enable site status (on port
> > 18121 for example) I can receive however Status-Server request only on
> port
> > 1812 and 1813. Is this correct?
>
> Yes.
>
> > 4) home_server gone on alive status only if at least one request is been
> > received from server else home_server is leave on "unknown" status. Is
> this
> > correct ?
>
> Yes. "Unknown" is equivalent to "alive". The only difference is that
> it's a bit more information for the administrator.
>
> > 5) Is there a way to set alive status of all home_server automatically at
> > bootstrap ?
>
> No.
>
> > I see that with fail-over if I haven't received request from
> > startup (status of home_server is unknown) then on a failure of first
> > home_server, request is not sent to second home_server (at least on 3.0.8
> > version). Instead, if I have both home_server in alive status and I power
> > off first home_server, than request is correctly sent to second on
> failure
> > of first.
>
> It's more complicated than that. The NAS has to retransmit.
>
> Use radclient, with "-r 20", so it sends 20 retransmits. You WILL see
> the proxy fail over from one home server to another.
>
But why if all home_server are in status alive (and first failure on
receive packet) proxy send directly to second home_server without
re-transmissions?
RFC how describe fail-over operation ? Can you said me what are RFC that
describe these operations ? Thanks.
>
> > 6) If I haven't active status-server is there a way to handle home_server
> > only alive to avoid zombie period if a request go to failure / timeout ?
>
> I don't know what that means.
>
Yes I don't understand what I wrote. This happens when I write email to
night. :)
A client said me that 3GPP specification doesn't expect a response about a
Disconnect-Request if session doesn't exists or is already down. Do you
know if this is correct ?
>From freeradius side this means that when I receive a Disconnect-Request to
an already closed session and proxy forward correctly packet to correct NAS
, proxy doesn't receive Disconnect-Nack or Disconnect-Ack and so NAS is
marked as zombie/dead.
Is there a way to leave status alive for this case ? For example handle
Failure and said through unlang language to ignore timeout on reply of the
packet?
NAS doesn't support status-server extensions so I can't enable
status-server.
>
> Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/devel.html
--
--
--
Geaaru
More information about the Freeradius-Devel
mailing list