Robust Proxy Accounting problem after switch from 2.2.10 to 3.2.1
Martin Zaharinov
micron10 at gmail.com
Tue Nov 29 16:12:15 UTC 2022
ok i am back
after change robust config to this :
home_server home1.example.com {
type = acct
ipaddr = 192.168.0.1
port = 1813
secret = secret
status_check = request
username = "test_proxy"
response_window = 1
# response_window = 20
# revive_interval = 120
# check_interval = 30
# check_timeout = 4
# num_answers_to_alive = 1
# max_outstanding = 65536
# zombie_period = 40
}
all test i make with Freeradius main
-rw------- 1 freerad freerad 1034514 Nov 29 21:39 detail-20221129:21:39
-rw------- 1 freerad freerad 274375 Nov 29 21:40 detail-20221129:21:40
-rw------- 1 freerad freerad 141045 Nov 29 21:38 detail.work
for 1-2 interval i monitor folder and detail.work is change with old file in folder.
-rw------- 1 freerad freerad 1419261 Nov 29 21:40 detail-20221129:21:40
-rw------- 1 freerad freerad 86092 Nov 29 21:41 detail-20221129:21:41
-rw------- 1 freerad freerad 1034514 Nov 29 21:39 detail.work
———
-rw------- 1 freerad freerad 756237 Nov 29 21:41 detail-20221129:21:41
-rw------- 1 freerad freerad 98629 Nov 29 21:42 detail-20221129:21:42
-rw------- 1 freerad freerad 1419261 Nov 29 21:40 detail.work
> On 29 Nov 2022, at 17:46, Alan DeKok <aland at deployingradius.com> wrote:
>
> On Nov 29, 2022, at 10:40 AM, Martin Zaharinov <micron10 at gmail.com> wrote:
>> Idea is when Main radius is miss to cache account data and to respons to client if Main server is not alive.
>
> I understand that. That is what the documentation for the "robust proxy accounting" server says. And I wrote that documentation, so I understand how it works.
>
>> Do you have config for proxing directly , and if is direct idea is when Main server is dead to respons to users and user dont wait acct answer from main server.
>
> Read sites-available/robust-proxy-accounting
>
> That is how that virtual server works. If you did anything else, you didn't follow the documentation.
>
>>> The virtual server "robust proxy accounting" only uses the detail file if the home server is down.
>>>
>>> So why is the home server down for extended periods of time?
>>
>> Java radius in folder file is very fast process and not stay in folder.
>
> That doesn't answer my question.
>
>> Freeradius server, AAA vendor write server is alive and respons but in folder i see this files and file is increase.
>
> So you configured the robust-proxy-account wrong.
>
> It looks like you have it ALWAYS writing to the detail file, and then proxying. This is exactly the opposite of how that virtual server works.
>
> Instead, follow the documentation. Have it proxy first, and then only write to the detail file if the home server is down.
>
>> Per Second.
>
> 24K packets per second is a very high load system. If a home server goes down for extended periods of time, then there will quickly be gigabytes of detail files written to disk.
>
> Alan DeKok.
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
More information about the Freeradius-Users
mailing list