Re: OPS patch for Keepalived

Sven Hartge <[email protected]>
Newsgroups gmane.linux.keepalived.devel
Organization Newsfeed am Wurmloch
Message-ID <[email protected]>
Erik de Groot <[email protected]> wrote:

> The reason for doing this that I want to use Keepalived for RADIUS 
> loadbalancing. 

Beware! 

If you have any clients using EAP authentication, this will break
horribly, since EAP uses several round-trips of Request and Response
packages between the RADIUS server and the supplicant.

If your load-balancer forwards those packages to different RADIUS
servers, your users will never (or at least seldom) be able to correctly
authenticate.

I learned this the really hard way and have since used a FreeRADIUS
proxy server to correctly load-balance authentication requests to
different backend servers.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.


------------------------------------------------------------------------------
Introducing Performance Central, a new site from SourceForge and 
AppDynamics. Performance Central is your source for news, insights, 
analysis and resources for efficient Application Performance Management. 
Visit us today!
http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk
_______________________________________________
Keepalived-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/keepalived-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.