Pre-release of Version 2.1.8

[Bjørn Mork]

Alan DeKok <aland at deployingradius.com> writes:
> Garber, Neal wrote:
>> When it fails, is it always at night?  If so, could it be related to network load - perhaps backups that are running?  You could try capturing the output from a continuous ping to see if you start getting timeouts or really long response times between FR and one of the proxy servers that are having problems (obviously you'd want to check before, during and after the problem occurs).  
>> 
>> Said differently, maybe this isn't a FreeRadius problem..

Backups and other management activity is done on a separate network
(separate NIC, separate switch etc), so it won't affect operation.

>   The log messages show a lot of:
>
> No outstanding request was found for reply ...
>
>   This indicates that the home server responded MANY seconds after the
> request.  This indicates one (or more of)
>
>     a) extremely bad network connection
>
>     b) a home server on a *very* slow box
>
>     c) an overloaded home server (1000's of packets/s)
>
>   There is *nothing* you can do to the proxy that will solve those issues.

Yes, these are (all?) true for some of the home servers, and there is of
course nothing my servers can do about those.  I realize that FreeRADIUS
can't do magic :-)

That's not a problem.  You provide a bad/buggy/lousy home radius server
for your users, then you get bad/buggy/lousy radius service.

My problem is that this affects *all* proxied realms, including those
with perfect radius servers.  I know, because one of those realms is our
own, running FreeRADIUS on another set of servers.

You'll notice that all the "No outstanding request was found " messages
were caused by only 2 slow servers in 2 different realms. That shouldn't
bring down proxying for the other 20 realms.

>   Get the upstream home servers to run properly.  Poking at FreeRADIUS
> should be a lower priority.

I have to agree.  But that's the ideal world.

In real life, I need FreeRADIUS to survive anything a home server does
without any effect on other realms than the one served by the bad home
server.


Bjørn