How to cache the EAP-TLS session-state in redis

[Alan DeKok]

On Jun 17, 2024, at 4:33 AM, James Fan <polysorb at gmail.com> wrote:
> If we have multiple FreeRADIUS server instances with a load balancer in
> front of them, how do we ensure the TLS session is successful?

  Configure the load balancer to send all packets for the same TLS session to the same back-end server.  That's what Arran said in his reply to you.

> The
> handshake requests will be sent to different servers, which will cause the
> session mismatching issue.

  Exactly.

> Do we need to use the load balancer settings, or is the FreeRADIUS server
> able to handle this?

  Configure the load balancer correctly. 

  Alan DeKok.