post-proxy and detecting dead upstream realms

Matt Zagrabelny mzagrabe at d.umn.edu
Thu Jan 15 15:48:14 CET 2015


Hi Phil,

Sorry I cannot help with evaluating the code, but I've got a question...

On Thu, Jan 15, 2015 at 8:39 AM, Phil Mayers <p.mayers at imperial.ac.uk> wrote:
> I'd like to do something like this:
>
> pre-proxy {
>   update control {
>     Tmp-Integer-0 := "%{some_scoring_thing:%{Realm}}"
>   }
>   if (Tmp-Integer-0 > 10) {
>     reject
>   }
> }
>
> post-proxy {
>   Post-Proxy-Type Timeout {
>     some_scoring_thing
>   }
> }
>
> The idea is that I have an upstream proxy (eduroam) with potentially
> hundreds of realms behind it. Some realms just don't respond, and when that
> happens above a certain threshold, I'd like to locally blacklist the realm
> and avoid sending them to the upstream proxy for some time period.

Why do you care if the realm doesn't respond?

Thanks,

-m


More information about the Freeradius-Users mailing list