Robust Proxy Accounting problem after switch from 2.2.10 to 3.2.1

Martin Zaharinov micron10 at gmail.com
Tue Nov 29 16:12:15 UTC 2022


ok i am back


after change robust config to this : 

home_server home1.example.com {
    type = acct
    ipaddr = 192.168.0.1
    port = 1813
    secret = secret
    status_check = request
    username = "test_proxy"
    response_window = 1

#   response_window = 20
#   revive_interval = 120
#    check_interval = 30
#   check_timeout = 4
#    num_answers_to_alive = 1
#    max_outstanding = 65536
#    zombie_period = 40

}

all test i make with Freeradius main 


-rw------- 1 freerad freerad 1034514 Nov 29 21:39 detail-20221129:21:39
-rw------- 1 freerad freerad  274375 Nov 29 21:40 detail-20221129:21:40
-rw------- 1 freerad freerad  141045 Nov 29 21:38 detail.work



for 1-2 interval i monitor folder and detail.work is change with old file in folder.

-rw------- 1 freerad freerad 1419261 Nov 29 21:40 detail-20221129:21:40
-rw------- 1 freerad freerad   86092 Nov 29 21:41 detail-20221129:21:41
-rw------- 1 freerad freerad 1034514 Nov 29 21:39 detail.work



———

-rw------- 1 freerad freerad  756237 Nov 29 21:41 detail-20221129:21:41
-rw------- 1 freerad freerad   98629 Nov 29 21:42 detail-20221129:21:42
-rw------- 1 freerad freerad 1419261 Nov 29 21:40 detail.work






> On 29 Nov 2022, at 17:46, Alan DeKok <aland at deployingradius.com> wrote:
> 
> On Nov 29, 2022, at 10:40 AM, Martin Zaharinov <micron10 at gmail.com> wrote:
>> Idea is when Main radius is miss to cache account data and to respons to client if Main server is not alive.
> 
>  I understand that.  That is what the documentation for the "robust proxy accounting" server says.  And I wrote that documentation, so I understand how it works.
> 
>> Do you have config for proxing directly , and if is direct idea is when Main server is dead to respons to users and user dont wait acct answer from main server.
> 
>  Read sites-available/robust-proxy-accounting
> 
>  That is how that virtual server works.  If you did anything else, you didn't follow the documentation.
> 
>>> The virtual server "robust proxy accounting" only uses the detail file if the home server is down.
>>> 
>>> So why is the home server down for extended periods of time?
>> 
>> Java radius in folder file is very fast process and not stay in folder.
> 
>  That doesn't answer my question.
> 
>> Freeradius server, AAA vendor write server is alive and respons but in folder i see this files and file is increase.
> 
>  So you configured the robust-proxy-account wrong.
> 
>  It looks like you have it ALWAYS writing to the detail file, and then proxying.  This is exactly the opposite of how that virtual server works.
> 
>  Instead, follow the documentation.  Have it proxy first, and then only write to the detail file if the home server is down.
> 
>> Per Second.
> 
>  24K packets per second is a very high load system.  If a home server goes down for extended periods of time, then there will quickly be gigabytes of detail files written to disk.
> 
>  Alan DeKok.
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list