Francois Baligant wrote:
>
> We have a very weird problem load-balancing UDP-based
> RADIUS packets.
don't know anything about RADIUS - I'll assume I don't need to know
for the moment.
> UDP 195.74.212.37:16450 rr
> -> 195.74.212.26:16450 Route 1 0 0
> -> 195.74.212.34:16450 Route 1 0 0
> UDP 195.74.212.31:1646 wlc
> -> 195.74.212.26:1646 Route 1 0 106
> -> 195.74.212.10:1646 Route 1 0 106
> UDP 195.74.212.31:1645 wlc
> -> 195.74.212.26:1645 Route 1 0 1
> -> 195.74.212.10:1645 Route 1 0 0
>
> We try to load-balance 3 ports. 1645 (authentication),
> 1646 (accounting) and 16450 (authentication for another
> kind of service).
>
> What's weird is that 1645 works really fine but the 2
> others rules just do not load-balance. Packets are always
> sent to the same host. (in fact the first that was added
> to the VS IP)
how is the output above an example of it not working?
Someone had a similar sounding problem with ntp (which is udp based).
All packets would go to one host and then after a little while to
another. In the short term the load balancing was bad, but
over the long term (>15mins) the loadbalancing was fine.
The udp LVS code sends all udp packets to one realserver, till a timeout
is reached, and then sends the next packets to another realserver.
It sounds like all udp packets are going to one realserver forever, right?
> UDP packets come from a single
> server (our central proxy radius).
Do you mean that the udp packets are coming from a single machine, which
is a client for the LVS, but is a server for your users?
Joe
--
Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
contractor to the National Environmental Supercomputer Center,
mailto:mack.joseph@xxxxxxx ph# 919-541-0007, RTP, NC, USA
|