Proxy Maintenance Process

[Alexander Clouter]

Brian Carpio <bcarpio at broadhop.com> wrote:
> 
> Currently we are using freeradiusd to proxy / load balance requests to 
> our backend radius application. However as I'm sure many of you 
> encounter there are times which require maintenance / upgrades of the 
> backend servers, what is the "best practice" in regards to putting 
> home_servers into maintenance so that freeradiusd doesn't attempt to 
> send traffic to them?
> 
> I'm not sure if there is a simple command we can run? Or is the only 
> option to comment out the home_server from the home_server_pool and 
> then kill -1 to the radiusd process?
>
You might want to consider an alternative deployment, we use anycasting 
and found it very reliable and far easier to maintain:

http://www.digriz.org.uk/ha-ospf-anycast

Make sure there are at least two L3 hops between RADIUS servers.

Cheers

-- 
Alexander Clouter
.sigmonster says: Do not believe in miracles -- rely on them.