Re: [pfSense Support] tuning incoming load balancer

2007-11-13 Thread Paul M
Bill Marquette wrote: On 9/25/07, Bill Marquette <[EMAIL PROTECTED]> wrote: no, it says the IP is already in the list and refuses to add it; I guess that javascript could be changed to say "are you sure" and make it possible. Hmmm, the hackathon is coming up in a couple weeks. I'll take a loo

Re: [pfSense Support] tuning incoming load balancer

2007-10-22 Thread Paul M
Bill Marquette wrote: > On 9/25/07, Bill Marquette <[EMAIL PROTECTED]> wrote: >>> no, it says the IP is already in the list and refuses to add it; I guess >>> that javascript could be changed to say "are you sure" and make it possible. >> Hmmm, the hackathon is coming up in a couple weeks. I'll ta

Re: [pfSense Support] tuning incoming load balancer

2007-10-19 Thread Bill Marquette
On 9/25/07, Bill Marquette <[EMAIL PROTECTED]> wrote: > > no, it says the IP is already in the list and refuses to add it; I guess > > that javascript could be changed to say "are you sure" and make it possible. > > Hmmm, the hackathon is coming up in a couple weeks. I'll take a look > at this the

Re: [pfSense Support] tuning incoming load balancer

2007-09-26 Thread Paul M
Bill Marquette wrote: > Yep, again, the load balance itself is performed in kernel. pf itself > doesn't really care about icmp unreachables (and that only addresses > the issue of Apache going down, not of the whole box crashing). OK, thanks for that clarification. BTW, we've been testing with a

Re: [pfSense Support] tuning incoming load balancer

2007-09-25 Thread Bill Marquette
On 9/25/07, Paul M <[EMAIL PROTECTED]> wrote: > p.s. does the load balancer have any sort of session affinity? Not really. Under System->Advanced you can turn on sticky sessions, but that only works for a user as long as they still has active TCP states on the firewall to an existing server. We

Re: [pfSense Support] tuning incoming load balancer

2007-09-25 Thread Bill Marquette
On 9/25/07, Paul M <[EMAIL PROTECTED]> wrote: > >> 2/ why didn't pfsense pick up the dead unit when I connected and know to > >> redirect, or at least only fail the once? > > Nope. The load balancing is performed by pf which has no concept of > > dead servers. The actual monitoring is performed i

Re: [pfSense Support] tuning incoming load balancer

2007-09-25 Thread Paul M
p.s. does the load balancer have any sort of session affinity? - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] tuning incoming load balancer

2007-09-25 Thread Paul M
Bill Marquette wrote: >> Thus I would like to ask >> 1/ how quickly should pfsense discover one of the units in the pool is dead? > > 5 seconds thanks for that. From my limited testing that's what I observed. I'm told we can live with that. I must admit to being lazy^W overworked, trying to find

Re: [pfSense Support] tuning incoming load balancer

2007-09-24 Thread Bill Marquette
On 9/24/07, Paul M <[EMAIL PROTECTED]> wrote: > Hi, > Having successfully used pfsense as a clustered firewall with CARP for > external and internal shared IPs, I am trying its load balancing feature > to manage a pool of web servers. > > So, created a pool with 2 httpd's, and it works. However, wh

[pfSense Support] tuning incoming load balancer

2007-09-24 Thread Paul M
Hi, Having successfully used pfsense as a clustered firewall with CARP for external and internal shared IPs, I am trying its load balancing feature to manage a pool of web servers. So, created a pool with 2 httpd's, and it works. However, when I killed httpd on one box, I got a few errors when con