(RADIATOR) traffic shaping for radius requests to limit spike damage

[Hugh Irvine]

Hello Tariq -

This topic has been discussed previously and the problem is not really 
a Radiator problem but rather a NAS problem.

Indeed Cisco has recently recognised this and released IOS support to 
limit the rate of radius requests generated by the NAS.

If your vendor does not yet support this you should ask them why not.

regards

Hugh


On 4 Jun 2004, at 11:48, Tariq Rashid wrote:

>
> i wonder if anyone has experience in this or comments ...
>
> in a test environment, we note that rare spikes of very high request 
> rates
> seem to knock out the radius servers for a short period while they 
> recover.
>
> an immediate solution that comes to mind is to use traffic shaping 
> (such as
> ALTQ) to smooth off the peaks in request traffic. that is, for normal
> request rates no traffic shaping occurs, but for higher request rates, 
> the
> peaks are smoothed out before they reach the servers. this is more a
> preventative measure until the cause of the server knock-out is found.
>
> has anyone done this - or have comments as to the usefulness of this 
> method.
>
> tariq
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>
>

NB: have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.