Loadbalancing and failover using different servers

2011-01-14 Thread Juan Perez
Hi everybody, I want to implement a RADIUS load-balancing and failover scenario using FreeRadius and Cisco ACS. The idea I have in mind is to have these two servers answering to RADIUS requests in a round-robin fashion and should one of them for some reason go down, the other one would take

Re: Loadbalancing and failover using different servers

2011-01-14 Thread Alan DeKok
Juan Perez wrote: I want to implement a RADIUS load-balancing and failover scenario using FreeRadius and Cisco ACS. The idea I have in mind is to have these two servers answering to RADIUS requests in a round-robin fashion and should one of them for some reason go down, the other one would

RE: Re: Loadbalancing and failover using different servers

2011-01-14 Thread Juan Perez
Juan Perez wrote: I want to implement a RADIUS load-balancing and failover scenario using FreeRadius and Cisco ACS. The idea I have in mind is to have these two servers answering to RADIUS requests in a round-robin fashion and should one of them for some reason go down, the other one

Re: Loadbalancing and failover using different servers

2011-01-14 Thread Alexander Clouter
Alan DeKok al...@deployingradius.com wrote: I want to implement a RADIUS load-balancing and failover scenario using FreeRadius and Cisco ACS. The idea I have in mind is to have these two servers answering to RADIUS requests in a round-robin fashion and should one of them for some reason go

Re: Loadbalancing and failover using different servers

2011-01-14 Thread Alan DeKok
Juan Perez wrote: Let's suppose that I have two servers running the latest and shiniest version of FreeRadius and for some reason there is a bug in FreeRadius that causes the server to crash when a specially crafted RADIUS packet is received. Hmm... that's hard to do:

RE: Loadbalancing and failover using different servers

2011-01-14 Thread Jason Hodges
Let's suppose that there is also an attacker (a disglunted employee maybe?), who knows about this bug and decides to attack my FreeRadius servers, so he starts sending these specially crafted packets to each server and since the two servers have the same bug, both of them would die upon