[RADIATOR] AuthRADIUS : Could not find a working host to forward messages
Peter Havekes
p.havekes at avans.nl
Fri Sep 5 01:51:18 CDT 2014
Roberto,
I've seen this happening. The problem was that some usernames were
incorrect, and not handled by the backend servers. If the backend server
ignores the message, the frontend will think the backend servers have
died, and tries the next server. This continues until all backend
servers have been marked as 'dead'.
We've resolved this by adding a handler to the end of the backend
config, denying every request that hasn't been handled before.
On 05-09-14 08:39, Ullfig, Roberto wrote:
> Hello,
>
> with the semester just beginning we find that our Radius services
> (using UDP) can't keep up. The servers themselves are pretty much
> idle. We're using 3 load balancers and AuthBy HASHBALANCE - connecting
> to 7 radius instances on 5 different servers (RHEL 6). We've been
> running like this for a few years. At peak we're authenticating ~15
> users a second but we're now seeing tons of these messages (128231 on
> Thursday) on the load balancers and lots of users can't connect:
>
> AuthRADIUS : Could not find a working host to forward messages
>
> We're having a hard time determining the bottleneck. Should we just
> add a whole bunch of new instances on these idle servers?
>
>
> ---
> Roberto Ullfig - ACCC Research Programmer
> rullfig at uic.edu
>
>
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator
--
Peter Havekes
ICT-Ontwikkeling & CSIRT | Diensteenheid ICT en Facilitair
Avans Hogeschool | 0885256592 | Onderwijsboulevard 215 |
5223 DE 's-Hertogenbosch | http://www.avans.nl
Twitter: https://twitter.com/phavekes
Google+: https://plus.google.com/+PeterHavekes
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.open.com.au/pipermail/radiator/attachments/20140905/4793c9e3/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3233 bytes
Desc: S/MIME Cryptographic Signature
Url : http://www.open.com.au/pipermail/radiator/attachments/20140905/4793c9e3/attachment.bin
More information about the radiator
mailing list