Pre-release of Version 2.1.8

Alan DeKok aland at deployingradius.com
Tue Dec 8 15:52:34 CET 2009


Bjørn Mork wrote:
> Yes, I got one of those:
> 
> Tue Dec  8 08:49:22 2009 : Proxy: Marking home server 192.168.8.216 port 1812 as dead.
> Tue Dec  8 08:49:22 2009 : Error: Failed creating new proxy socket: server is too busy and home servers appear to be down

  OK.  That indicates that all 32 sockets have been allocated.  All this
means is that no *new* sockets will be allocated from now on.

> So it's possible that a few failing home servers end up tying up all
> sockets available for proxying?

  No.  See my other post for a detailed explanation.

>  Or am I misunderstanding this?  For how
> long?  The server was not responding to requests going to a proxy at all
> between 08:43:27 and 09:35:46.  That's a very long time to sit waiting
> for available resources...

  I agree.  You should use radmin to look at the server stats, to see
what it's doing.

> But I still believe sharing these resources in a way which let a few bad
> servers steal them all, is wrong.  It should be possible to isolate two
> independent realms from each other, even if they use the same proxy
> radius. 

  See my other post.  They are isolated, unless they both proxy to the
same home server.  When that happens, they share the home server state.

>>   If that works, we could do a "git bisect" to find the issue.  There
>> are only 26 commits since them, and many of those don't have code
>> changes.  It shouldn't be too hard to track down the offending commit.
> 
> Given that I can actually trigger the problem in a test enviroment.  I
> don't think I can.

  ?  You can reproduce it, but can't find the offending commit?

  Alan DeKok.



More information about the Freeradius-Users mailing list