rlm_perl and accounting -- radrelay?
Alan DeKok
aland at deployingradius.com
Thu Sep 7 17:07:53 CEST 2006
Kostas Kalevras <kkalev at noc.ntua.gr> wrote:
> Just a side note on the clone packets issue i ve come across it in
> another situation. We act as a proxy for various ISPs and we need to
> have a way to replicate accounting-on/off packets (which obviously
> don't carry a username at realm attribute) to all ISPs. But currently
> this is not possible since we have a server logic of one request,one
> thread. Being able to use multiple Proxy-To-Realm attributes would
> be great.
I think the easiest way to do this is to write a special-purpose 1-N
proxying server. It's special purpose enough that I'm not sure that
work belongs in the server core. i.e. Doing N proxies means what,
exactly for pre/post-proxy sections? Do we add a queue of proxied
packets to the REQUEST?
The 1-N proxying server can look for special "proxy to X" attributes
in the packet, strip them out, and proxy the packet to N different
places. It can even read proxy.conf, so there's one source for
configuration files. With a little more work, it can also read the
"detail" files, and be radrelay, too.
I don't think that's hard to do.
Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
More information about the Freeradius-Users
mailing list