LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Re: Problem load-balancing Radius (UDP)

To: Francois Baligant <francois@xxxxxxxxxxx>
Subject: Re: Problem load-balancing Radius (UDP)
Cc: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
From: Joseph Mack <mack.joseph@xxxxxxx>
Date: Wed, 10 May 2000 07:13:22 -0400
Francois Baligant wrote:
> 
>         We have a very weird problem load-balancing UDP-based
>         RADIUS packets.

don't know anything about RADIUS - I'll assume I don't need to know
for the moment.

> UDP 195.74.212.37:16450 rr
>       -> 195.74.212.26:16450   Route   1      0          0
>       -> 195.74.212.34:16450   Route   1      0          0
> UDP 195.74.212.31:1646 wlc
>       -> 195.74.212.26:1646    Route   1      0          106
>       -> 195.74.212.10:1646    Route   1      0          106
> UDP 195.74.212.31:1645 wlc
>       -> 195.74.212.26:1645    Route   1      0          1
>       -> 195.74.212.10:1645    Route   1      0          0
> 
>         We try to load-balance 3 ports. 1645 (authentication),
>         1646 (accounting) and 16450 (authentication for another
>         kind of service).
> 
>         What's weird is that 1645 works really fine but the 2
>         others rules just do not load-balance. Packets are always
>         sent to the same host. (in fact the first that was added
>         to the VS IP)

how is the output above an example of it not working?

Someone had a similar sounding problem with ntp (which is udp based).
All packets would go to one host and then after a little while to
another. In the short term the load balancing was bad, but
over the long term (>15mins) the loadbalancing was fine. 
The udp LVS code sends all udp packets to one realserver, till a timeout
is reached, and then sends the next packets to another realserver. 
It sounds like all udp packets are going to one realserver forever, right?


>         UDP packets come from a single
>         server (our central proxy radius).

Do you mean that the udp packets are coming from a single machine, which
is a client for the LVS, but is a server for your users?

Joe

-- 
Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center, 
mailto:mack.joseph@xxxxxxx ph# 919-541-0007, RTP, NC, USA


<Prev in Thread] Current Thread [Next in Thread>