Hi,
Is anyone out there load balancing RADIUS with an F5 load balancer? We're doing
it here, but I can't help thinking that the actual load balancing algorithm
need some tweaking.
As far as I'm aware ( systems section support the F5 boxes)
1). We're using round robin to spread the load over
On Wed, Oct 9, 2013 at 3:41 PM, Alex Sharaz alex.sha...@york.ac.uk wrote:
While we have 900 switches doing mac and 802.1x based auth, we can have
6000+ users on our wireless network all authenticating to RADIUS via 3 RAS
clients. Looking at the back end server log files, it does look as if, in
Am Mittwoch, 9. Oktober 2013, 09:41:19 schrieb Alex Sharaz:
Hi,
Is anyone out there load balancing RADIUS with an F5 load balancer? We're
doing it here, but I can't help thinking that the actual load balancing
algorithm need some tweaking.
As far as I'm aware ( systems section support
On 09.10.2013 10:41, Alex Sharaz wrote:
Hi,
Is anyone out there load balancing RADIUS with an F5 load balancer? We're
doing it here, but I can't help thinking that the actual load balancing
algorithm need some tweaking.
I have f5 loadbalancers but atm I don't use them for our RADIUS
On 9 Oct 2013, at 10:16, Fajar A. Nugraha l...@fajar.net wrote:
On Wed, Oct 9, 2013 at 3:41 PM, Alex Sharaz alex.sha...@york.ac.uk wrote:
While we have 900 switches doing mac and 802.1x based auth, we can have 6000+
users on our wireless network all authenticating to RADIUS via 3 RAS
On 09.10.2013 11:25, Olivier Beytrison wrote:
On 09.10.2013 10:41, Alex Sharaz wrote:
I was wondering if there's a way off having a bit more granularity in terms
of how the f5 load balances incoming RADIUS requests.
Another nice thing to do is to do persistence based on radius AVP
...@lists.freeradius.org]
De la part de Michael Schwartzkopff
Envoyé : mercredi 9 octobre 2013 11:17
À : FreeRadius users mailing list
Objet : Re: load balancing radius with F5 devices
Am Mittwoch, 9. Oktober 2013, 09:41:19 schrieb Alex Sharaz:
Hi,
Is anyone out there load balancing RADIUS with an F5 load balancer
Many thanks for this Olivier, much appreciated
Rgds
A
On 9 Oct 2013, at 11:07, Olivier Beytrison oliv...@heliosnet.org wrote:
On 09.10.2013 11:25, Olivier Beytrison wrote:
On 09.10.2013 10:41, Alex Sharaz wrote:
I was wondering if there's a way off having a bit more granularity in terms
of
thanx john:
yes i can run many instances of radclient. But i want on instance of
radclient, that can send parallel requests to radius server.
On Wed, Feb 13, 2013 at 12:56 PM, Johan Meiring
jmeir...@pcservices.co.zawrote:
On 2013/02/12 04:45 PM, Alan DeKok wrote:
I tried to use Rad Client
On 2013/02/12 04:45 PM, Alan DeKok wrote:
I tried to use Rad Client to send requests in Parallel, but i wasn't
succeed. Could you please help me out to send parallel requests to proxy
server???
Am I missing something, or can you not simply run more than once instance of
radclient on more
On 13.02.2013 09:03, Muhammad Nadeem wrote:
thanx john:
yes i can run many instances of radclient. But i want on instance of
radclient, that can send parallel requests to radius server.
simply use
echo User-Name=001AAD3F8165,
NAS-IP-Address=10.192.100.4|radclient -p 100 -c 1
On Wed, Feb 13, 2013 at 4:33 PM, Muhammad Nadeem mnadeem8...@gmail.com wrote:
for load testing. But when i use this with -p (to send requests in
parallel), it only send one packet. here is the command out put
[root@billing ~]# echo User-Name=001AAD3F8165,
NAS-IP-Address=10.192.100.4|radclient
I used -c 1, and omit -p,, result was the same . 1 users were
authenticated in 23 seconds :) . So i think no difference of using -p and
-c together ?? M I right??
On Wed, Feb 13, 2013 at 1:32 PM, Muhammad Nadeem mnadeem8...@gmail.comwrote:
will it send 1 parallel requests to
On Wed, Feb 13, 2013 at 1:42 AM, Muhammad Nadeem mnadeem8...@gmail.com wrote:
Could you
please help me out to send parallel requests to proxy server???
Try radclient (see -p): http://linux.die.net/man/1/radclient
Alternatively, try radperf: http://networkradius.com/radperf.html
--
Fajar
-
will it send 1 parallel requests to free radius server
why not simply use -c 1, instead of -p 100 -c 1. What will be the
difference???
Thanks
On Wed, Feb 13, 2013 at 1:16 PM, Olivier Beytrison oliv...@heliosnet.orgwrote:
On 13.02.2013 09:03, Muhammad Nadeem wrote:
thanx john:
On 13.02.2013 09:38, Muhammad Nadeem wrote:
I used -c 1, and omit -p,, result was the same . 1 users were
authenticated in 23 seconds :) . So i think no difference of using -p
and -c together ?? M I right??
Well yeah -p works only with a file (-f)
so, feed your request multiple
Athanx Fajar
Actually Rad perf is not available on website. And i also used -p with
radclient. But it didnot sent requests in parallel.
On Wed, Feb 13, 2013 at 1:30 PM, Fajar A. Nugraha l...@fajar.net wrote:
On Wed, Feb 13, 2013 at 1:42 AM, Muhammad Nadeem mnadeem8...@gmail.com
wrote:
Could
ok, I followed your process. i make a file with User-Name and
NAS-IP-Address attribute. and issue the following command
radclient -c 10 -p 1000 -f radrequest.txt 192.168.0.112 auth testing123
But i only receive 10 access-accept packets. So what does it mean?? If
upper command issues 1000 requests
On 13.02.2013 11:45, Muhammad Nadeem wrote:
ok, I followed your process. i make a file with User-Name and
NAS-IP-Address attribute. and issue the following command
radclient -c 10 -p 1000 -f radrequest.txt 192.168.0.112 auth testing123
But i only receive 10 access-accept packets. So what does
thanks a lot olivier... This stuff really worked for me.. cheers
On Wed, Feb 13, 2013 at 4:05 PM, Olivier Beytrison oliv...@heliosnet.orgwrote:
On 13.02.2013 11:45, Muhammad Nadeem wrote:
ok, I followed your process. i make a file with User-Name and
NAS-IP-Address attribute. and issue the
Hi,
I am using Freeradius 2.2.0 on redhat 5. My goal was to increase the speed
of user authentication. To achieve this I configured Load Balancing (with
realms). I have a proxy Freeradius server, that is just proxying requests
to 2 other freeradius servers.
you only asked
thanks alan
Actually I am using load balancing for rapid authentication of users. let
suppose i have one prosy server that is proxying incoming requests to these
five servers. Theoratically the speed of authentication should be fast. But
in case of mine it is too slow.
I have changed 'max_requests
There are many different things you are talking at the same time.
You want increase the response time of auth. Is your database indexed?
Thanks
On Tuesday, February 12, 2013, Muhammad Nadeem wrote:
thanks alan
Actually I am using load balancing for rapid authentication of users. let
suppose
Hi,
I am new to freeradius. I wantto implement load balancing on freeradius
servers (not on backend database).
I want that if a bulk of requests are received, these requests should be
distributed evenly among multiple freeradius servers.
Can any one please tell me, how could i achieve this goal
hi,
I want that if a bulk of requests are received, these requests should be
distributed evenly among multiple freeradius servers.
in proxy.conf, ensure that you have a suitable load-balance type defined for the
target servers - be aware that some types do not operate with EAP...as the
Muhammad Nadeem wrote:
Hi,
I am new to freeradius. I wantto implement load balancing on freeradius
servers (not on backend database).
I want that if a bulk of requests are received, these requests should be
distributed evenly among multiple freeradius servers.
Can any one please tell me, how
succeed. Could
you please help me out to send parallel requests to proxy server???
Bundle of thanks in advance :)
On Tue, Feb 12, 2013 at 7:19 PM, Alan DeKok al...@deployingradius.comwrote:
Muhammad Nadeem wrote:
Hi,
I am new to freeradius. I wantto implement load balancing on freeradius
Muhammad Nadeem wrote:
thanx alan,,
I have configured a proxy server using documentation of 'proxy.conf'.
which is proxying requests to 2 home_servers. Yes you are right, may b
the tool which I am using (Radius NT client) sending requests in series.
Then the test doesn't mean anything.
I
On 02/12/2013 06:12 AM, Muhammad Nadeem wrote:
thanks alan
Actually I am using load balancing for rapid authentication of users.
let suppose i have one prosy server that is proxying incoming requests
to these five servers. Theoratically the speed of authentication should
be fast. But in case
There aren't many good tools available. I did have a tool on the corporate
web site (radperf), but that's been taken down for various reasons.
You can always use commercial traffic generators.
We're a Java group and we use Jmeter with a home-written sampler that uses
TinyRadius client.
thanx alan..
But i searching around on web i came to know that radclient can also be
used for load testing. But when i use this with -p (to send requests in
parallel), it only send one packet. here is the command out put
[root@billing ~]# echo User-Name=001AAD3F8165,
On 08/24/2012 11:53 PM, McNutt, Justin M. wrote:
The underlying problem is that I have four production RADIUS servers
that all seem to choose the same domain controller, which is not only
a lot of load, but it's a bad idea in terms of fault tolerance.
I agree about the fault tolerance. In my
Grrr...
This is probably a Samba issue - a known one? - but I can't seem to get AD
authentications to hit multiple DCs. Everything goes to the one listed in
/etc/samba/smb.conf (which may be a coincidence).
I set up several mschap instances like so:
mschap mschap1 { ...
ntlm_auth -s
McNutt, Justin M. wrote:
Grrr...
This is probably a Samba issue - a known one? - but I can't seem to get
AD authentications to hit multiple DCs. Everything goes to the one
listed in /etc/samba/smb.conf (which may be a coincidence).
That's how the NT protocols work, IIRC.
You need to
Hi,
Authentication *works*, but all authentications go to the same DC (the one
specified in mschap2). Running radiusd -X shows that all mschap1/2/3
instances are being called, and no authentication *attempts* are being
sent to the other two domain controllers. (1 and 3 aren't
On 08/24/2012 08:11 PM, McNutt, Justin M. wrote:
Grrr...
This is probably a Samba issue - a known one? - but I can't seem to get
AD authentications to hit multiple DCs. Everything goes to the one
This is indeed a Samba issue, and unfortunately a hard one to fix.
ntlm_auth doesn't talk over
@lists.freeradius.org] On
Behalf Of alan buxey
Sent: Friday, August 24, 2012 3:59 PM
To: FreeRadius users mailing list
Subject: Re: redundant load balancing and mschap
Hi,
Authentication *works*, but all authentications go to the same DC (the one
specified in mschap2). Running radiusd
-
From: freeradius-users-bounces+mcnuttj=missouri@lists.freeradius.org
[mailto:freeradius-users-bounces+mcnuttj=missouri@lists.freeradius.org] On
Behalf Of Phil Mayers
Sent: Friday, August 24, 2012 4:23 PM
To: freeradius-users@lists.freeradius.org
Subject: Re: redundant load balancing
@lists.freeradius.org
[mailto:freeradius-users-bounces+mcnuttj=missouri@lists.freeradius.org] On
Behalf Of Phil Mayers
Sent: Friday, August 24, 2012 4:23 PM
To: freeradius-users@lists.freeradius.org
Subject: Re: redundant load balancing and mschap
On 08/24/2012 08:11 PM, McNutt, Justin M. wrote
of the
space-separated hostnames; that I did not test.
For load-balancing (this I have not tested) a round-robin DNS for the LDAP
servername may result in connections load balancing. Really this depends
on the DNS caching behavior inside the LDAP library and on the host OS,
but my impression
On 27/03/12 23:38, Brian De Wolf wrote:
On Mon, 26 Mar 2012 11:46:22 -0700
Scott McLane Gardnersgar...@uark.edu wrote:
If I can't use if statements in a load balance block, can anyone
suggest another way to go about accomplishing what I want to do here?
After reading this thread and
This is the answer. Also, this is much easier than what I was trying to
do. Thank you for the pointer, Alan.
-Scott
On 3/26/12 5:17 PM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote:
hi,
a quick glance at your question and i'd say you be better off using
simple entries in the users file - simple
Scott McLane Gardner wrote:
Sent: Tuesday, March 27, 2012 9:34 AM
To: FreeRadius users mailing list
Subject: Re: load balancing and if statements
This is the answer. Also, this is much easier than what I was
trying to do. Thank you for the pointer, Alan.
-Scott
I'd be surprised
Brian Julin wrote:
I'd be surprised if using Ldap-Group in the user's file
resulted in load balancing of the group membership
queries to the LDAP servers. Does it?
It doesn't.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I'd be surprised if using Ldap-Group in the user's file
resulted in load balancing of the group membership
queries to the LDAP servers. Does it?
It does, actually. Or at least it appears to. The first time it used ldap2
and the second time it used ldap1.
-
List info/subscribe/unsubscribe? See
Brian Julin wrote:
I'd be surprised if using Ldap-Group in the user's file
resulted in load balancing of the group membership
queries to the LDAP servers. Does it?
It doesn't.
Alan DeKok.
So, now I'm confused again. If this doesn¹t load balance, then how should
I really be going about
Scott McLane Gardner
I'd be surprised if using Ldap-Group in the user's file resulted in
load balancing of the group membership queries to the LDAP servers.
Does it?
It does, actually. Or at least it appears to. The first time
it used ldap2 and the second time it used ldap1
On 27/03/12 15:07, Scott McLane Gardner wrote:
I'd be surprised if using Ldap-Group in the user's file
resulted in load balancing of the group membership
queries to the LDAP servers. Does it?
It does, actually. Or at least it appears to. The first time it used ldap2
and the second time
I cannot answer your question about if statements, but this
much is clear: the Ldap-Group check attribute will query
the ldap module that was instantiated last. If you want
to query a specific module, you have to use modulename-Ldap-Group.
Similarly for ldap xlats, you have to use the module
.)
Does this mean that what I want to do is not possible?
I don't know, but I'll probably look into it over the next week
or two, because I never looked too hard at the LDAP config
I inherited, and didn't realize it was not load-balancing those
requests myself, and in fact isn't even redundant, so
Scott McLane Gardner wrote:
So, now I'm confused again. If this doesn¹t load balance, then how should
I really be going about this?
It's hard.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
So, is the documentation at
http://wiki.freeradius.org/Load-balancing#Interaction+with+%22if%22+and+%22
else%22 incorrect, or is it only correct for the very latest version?
-Scott
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
Does this mean that what I want to do is not possible?
my advice was so you werent doing all that LDAP-Group , NAS-IP-Address
stuff in unlang...
regarding the load-balance, you should be okay just keeping
that bit similar to how you had it ...heck, you might even try
Scott McLane Gardner wrote:
So, is the documentation at
http://wiki.freeradius.org/Load-balancing#Interaction+with+%22if%22+and+%22
else%22 incorrect, or is it only correct for the very latest version?
It's correct. You're missing the point.
That documentation is for calling MODULES
Hi,
So, is the documentation at
http://wiki.freeradius.org/Load-balancing#Interaction+with+%22if%22+and+%22
else%22 incorrect, or is it only correct for the very latest version?
its correct you want to load balance the requests to the LDAP servers, yes?
so whats the load balancing
On Mon, 26 Mar 2012 11:46:22 -0700
Scott McLane Gardner sgar...@uark.edu wrote:
If I can't use if statements in a load balance block, can anyone
suggest another way to go about accomplishing what I want to do here?
After reading this thread and realizing it affects my implementation
(though
FR 2.1.10 on Linux
I want to load balance my LDAP servers, but I also want to do some
checking for group membership. Reading the documentation at
http://wiki.freeradius.org/Load-balancing#Interaction+with+%22if%22+and+%22
else%22 makes me think I can use if and elsif statements in a load
Scott McLane Gardner Wrote:
Here is the configuration I am attempting:
load-balance {
ldap1
if (Ldap-Group == NET Staff) {
I cannot answer your question about if statements, but this
much is clear: the Ldap-Group check attribute will query
the ldap module that was
hi,
a quick glance at your question and i'd say you be better off using
simple entries in the users file - simple check items (use huntgroups
for your NAS addresses) with LDAP groups.
match the good stuff, set reply
match the bad stuff, set reject.
alan
-
List info/subscribe/unsubscribe? See
Robert Roll robert.r...@utah.edu wrote:
I'd like to try load balancing EAP/PEAP/MSCHAPV2 using freeradius. I
looked at the proxy.conf and it seems that there are two options,
because you have to insure the same end client talks to the same
radius server. There seems to be client-balance
: freeradius-users-bounces+robert.roll=utah@lists.freeradius.org
[freeradius-users-bounces+robert.roll=utah@lists.freeradius.org] On Behalf
Of Alexander Clouter [a...@digriz.org.uk]
Sent: Thursday, March 24, 2011 4:15 AM
To: freeradius-users@lists.freeradius.org
Subject: Re: Load Balancing
I'd like to try load balancing EAP/PEAP/MSCHAPV2 using freeradius. I looked at
the proxy.conf and it seems
that there are two options, because you have to insure the same end client
talks to the
same radius server. There seems to be client-balance that uses IP source
addresses
On 03/23/2011 08:56 PM, Robert Roll wrote:
I'd like to try load balancing EAP/PEAP/MSCHAPV2 using freeradius. I looked
at the proxy.conf and it seems
that there are two options, because you have to insure the same end client
talks to the
same radius server. There seems to be client-balance
Hi,
I'd like to try load balancing EAP/PEAP/MSCHAPV2 using freeradius. I
looked at the proxy.conf and it seems
that there are two options, because you have to insure the same end client
talks to the
same radius server. There seems to be client-balance that uses IP source
-bounces+robert.roll=utah@lists.freeradius.org
[freeradius-users-bounces+robert.roll=utah@lists.freeradius.org] On Behalf
Of Phil Mayers [p.may...@imperial.ac.uk]
Sent: Wednesday, March 23, 2011 3:47 PM
To: freeradius-users@lists.freeradius.org
Subject: Re: Load Balancing EAP with freeradius
Alexander Clouter a...@digriz.org.uk wrote:
We anycast our FreeRADIUS servers and have had great success with this.
http://www.digriz.org.uk/ha-ospf-anycast
Very interesting. Many thanks for that. May look into deploying this,
especially for DNS.
REW
-
List info/subscribe/unsubscribe? See
Alan DeKok al...@deployingradius.com wrote:
But for accounting, and PAP/CHAP authentication, it will work fine.
Fantastic. Many thanks for the confirmation.
REW
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Randy Wilson randyedwil...@gmail.com wrote:
We anycast our FreeRADIUS servers and have had great success with this.
http://www.digriz.org.uk/ha-ospf-anycast
Very interesting. Many thanks for that. May look into deploying this,
especially for DNS.
The most surprising helpful and
Hi,
Does anyone have any experience of load balancing two or more FreeRADIUS
servers using the iptables CLUSTERIP target?
For those unaware, it allows a single IP address to be assigned to multiple
servers. A multicast MAC address is used so that the traffic is forwarded to
each server
Randy Wilson randyedwil...@gmail.com wrote:
Does anyone have any experience of load balancing two or more FreeRADIUS
servers using the iptables CLUSTERIP target?
[snipped]
I have some production SMTP and FTP clusters that are load balanced in a
similar way, with Pacemaker handling
Randy Wilson wrote:
I'm considering assigning a CLUSTERIP
to the servers so we can make full use of the resources. Does anyone see
any potential issues of using this with FreeRADIUS or know of any
caveats I should be aware of?
EAP won't work. It requires multi-packet round trips between
Alan DeKok al...@deployingradius.com wrote:
Randy Wilson wrote:
I'm considering assigning a CLUSTERIP to the servers so we can make
full use of the resources. Does anyone see any potential issues of
using this with FreeRADIUS or know of any caveats I should be aware
of?
EAP won't work.
At the moment we have a freeradius 1.1.3 server on CentOS which is
functioning fine, but due to circumstances, and the devices we are using
as NASes, the ip pools are located on the NAS instead of being
centralized on the RADIUS server as we'd like it.
We'd now like to make things a bit more
nick wrote:
At the moment we have a freeradius 1.1.3 server on CentOS which is
functioning fine, but due to circumstances, and the devices we are using
as NASes, the ip pools are located on the NAS instead of being
centralized on the RADIUS server as we'd like it.
You should really upgrade
Alan DeKok ha scritto:
nick wrote:
At the moment we have a freeradius 1.1.3 server on CentOS which is
functioning fine, but due to circumstances, and the devices we are using
as NASes, the ip pools are located on the NAS instead of being
centralized on the RADIUS server as we'd like it.
On 11/20/2009 09:52 AM, Nick Warr wrote:
Alan DeKok ha scritto:
nick wrote:
At the moment we have a freeradius 1.1.3 server on CentOS which is
functioning fine, but due to circumstances, and the devices we are using
as NASes, the ip pools are located on the NAS instead of being
centralized on
On Fri, 2009-11-20 at 15:52 +0100, Nick Warr wrote:
I may have misphrased the question, if the ip pool is a single one,
containing say 192.168.1.1 - 192.168.1.50, is there a way that the
second Radius server can know the IPs distributed by the first Radius
server to avoid duplicate IP
MySQL is a DB. If it exports a transactional API, then it doesn't
matter if two RADIUS servers are allocating IP's simultaneously.
Alan DeKok.
I may have misphrased the question,
No, you didn't understand the answer.
if the ip pool is a single one,
containing say 192.168.1.1 -
Nick Warr wrote:
I may have misphrased the question, if the ip pool is a single one,
containing say 192.168.1.1 - 192.168.1.50, is there a way that the
second Radius server can know the IPs distributed by the first Radius
server to avoid duplicate IP assignments?
You said they both talked
Postgres does supposedly have a version in beta for full master-master
replication, but every time we've tried to get it running it's crashed
on us as soon as we tried to actually write any data. Postgres in
general seemed much slower than MySQL for reading the data we needed as well.
I
snip
I use a PostgreSQL DB form my three AAA server and the DB is enough
quick for serveral request per second.
Aah. We were wanting to handle 100 or so requests a second. Postgres
might well have done this, but we wanted room for expansion and our
tests with 10'000 requests at ~100 a second
Hi,
Meyers, Dan schrieb:
snip
I use a PostgreSQL DB form my three AAA server and the DB is enough
quick for serveral request per second.
I could be wrong, there might be one we've missed. If so, i'd love to
know as well, as master-master replication would make our lives easier
too :)
Uwe Kastens wrote:
Hi,
Meyers, Dan schrieb:
snip
I use a PostgreSQL DB form my three AAA server and the DB is enough
quick for serveral request per second.
I could be wrong, there might be one we've missed. If so, i'd love to
know as well, as master-master replication would make our
On Wed, Apr 22, 2009 at 2:58 PM, Santiago Balaguer García
santiago...@hotmail.com wrote:
However, I am looking for a (free) master-master DB, and the replication in
postgres crashes. And the problem in MySQL it was told before.
I admit suggestions for a BETTER free DB.
MySQL can do
Am Mittwoch, 22. April 2009 11:54:00 schrieb Meyers, Dan:
snip
I use a PostgreSQL DB form my three AAA server and the DB is enough
quick for serveral request per second.
Aah. We were wanting to handle 100 or so requests a second. Postgres
might well have done this, but we wanted room for
Hello,
I could be wrong, there might be one we've missed. If so, i'd love to
know as well, as master-master replication would make our lives easier
too :)
What is your need? More Read than write? Mabye think about mysql proxy
or some free cluster option.
First the disclaimer:
I have not
Michael,
supposedly a PostgreSQL master-master replication package
I think there might be much more read access then write access by using
a DB backend for RADIUS. If so it might be enough to have one master to
write and many slaves to read from. Or many master with a kind of sql
proxy like
Yes, man.
We know the PostgreSQL solution does not work. ORACLE is expensive. MySQL is
one master and serveral slaves.
Do you know another master-master database management system which is cheap?
Santiago
Ok. That is true. In that case you are talking about loosing money if
the
Santiago,
Yes, man.
We know the PostgreSQL solution does not work. ORACLE is expensive.
MySQL is one master and serveral slaves.
I don't think that the price of oracle is the problem. Without 3rd party
there is no way to have a real cluster solution.
Do you know another master-master
Yes, man.
We know the PostgreSQL solution does not work. ORACLE is expensive. MySQL
is one master and serveral slaves.
You can set up MySQL as master1-slave2 == slave1-master2. That works
sort of like master-master replication.
Ivan Kalik
Kalik Informatika ISP
-
List
If you require synchronous replication and your queries are conducive to it
there is MySQL Cluster. You might get some of the functionality you want
with DRBD (but write performance hits) and MySQL, which is supported
officially by MySQL, or through the use of circular replication with a pair
of
On Wed, Apr 22, 2009 at 8:43 PM, Uwe Kastens ki...@kiste.org wrote:
The problem with master master for
mysql is, that you have to resync each time you are dropping a table, a
view etc.pp.
No you don't.
When setup correctly, all SQL statement on one node will be executed
on the other node as
Subject: RE: failover and load balancing
snip
I also believe you're saying that I could load balance, too. In this
case, auth and accounting could be done on both machines, and I would
still have one freeradius server in use (primary), from the NAS' point
of view.
There are probably many
for the database bit.
What I don't understand is how the failover and load balancing is done
on the freeradius level (i.e. for auth) and still enter a single IP for
freeradius on the NAS.
Am I supposed to configure a virtual server on the first freeradius
server, copy the config to the second machine
and handle accounting failover.
I can conceptualize a cluster or even simple fail over using heartbeat for
the database bit.
No need.
What I don't understand is how the failover and load balancing is done on
the freeradius level (i.e. for auth) and still enter a single IP for
freeradius on the NAS.
It's
conceptualize a cluster or even simple fail over using
heartbeat for
the database bit.
No need.
What I don't understand is how the failover and load balancing is
done on
the freeradius level (i.e. for auth) and still enter a single IP for
freeradius on the NAS.
It's not done that way. Your
makes things easier
and what I would prefer to do.
Yes. Two identical configurations using buffered-sql or
ronust-proxy-accounting to send accounting to the database (or it's backups)
on top of default stuff. Even if you use load balancing (EAP can't work that
way - all EAP exchanges need
. However, when I
specify the 2 ldap servers like following:
redundant-load-balance {
ldap1
ldap2
}
The effect is just like redundant. All requests go still go to ldap1
instead of load balancing.
Did I
like redundant. All requests go still go to ldap1
instead of load balancing.
All I can say is that it works in my tests.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
load-balancing between the radius servers is not necessarily needed. I
think the servers we're going to by will be capable to manage all dialin
accounts.
So the radius servers will be in fail over mode. If the first one is up,
all requests will be handled by it. If it fails, the second one
1 - 100 of 130 matches
Mail list logo
