Question on dynamic home_server

Yushu Shi (yusshi) yusshi at cisco.com
Tue Jun 14 05:03:36 UTC 2022


Hi there,

Need some help with using freeradius as a proxy to two radius server pools.
The requirement is like below:

  *   There are two server pools, identified with host names: primary.radius.myorg.com  and secondary.radius.myorg.com.
  *   DNS request to the two host names returns the IP addresses of several servers in the pool in a round robin fashion, i.e, “host primary.radius.myorg.com” command returns 3 IP addresses.
  *   IP address of each server may get changed. Need to honor DNS TTL timer.
  *   All auth requests should be directed to the hosts in the primary pool round robin, and only fail over to the secondary if all hosts behind the primary are unresponsive.

Is there any way to accomplish these requirements without restarting the process? How should I create the home_server pools in proxy.conf to do this?

Thanks,
Yushu



More information about the Freeradius-Users mailing list