[RADIATOR] Multi-homed, Virtual IP and source IP

[Hugh Irvine]

Hello Thomas -

Radiator does not have access to the UDP packet headers - it simply gives the packet to the operating system to send.

The way I read the URL you provide below, each real server needs to have the VIP address configured on a loopback interface.

regards

Hugh


On 25 May 2010, at 17:01, Thomas Guthmann wrote:

> Hi Hugh,
> 
>> The load balancers that I have worked with rewrite the reply to the VIP address, [..]
> 
> If you are using LVS in Direct Routing mode [1], the real server 
> (radiator) will reply directly and won't go through the load balancer. 
> So nothing will modify the returning datagram source IP which will be 
> the IP of the radiator server and not the virtual IP.
> 
> So my main question is :
> Do you think it's possible to modify Radiator to reply with the 
> Access-Request destination address as the source address for the reply ?
> 
> Either, radiator can do that automatically because it's smart enough or 
> we can force a replyAddressToUse per Handler or AuthBy (like 
> LocalAddress). "Send back the reply with this IP".
> 
> Does it make sense ?
> 
> Cheers,
> Thomas
> 
> [1] : http://www.linuxvirtualserver.org/VS-DRouting.html
> 
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator



NB: 

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets), 
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.