Re: Experience with Open Source load balancers?

2011-05-19 Thread Hammer
Mattew, We run high volume SSL but not nearly the 12Gbps you are talking about so that hasn't been an issue for us. Thanks for the information. Looks like the Citrix ANG rep owes me another lunch to explain himself. :) I'm gonna do some research on NGINX... -Hammer- I was a normal

Re: Experience with Open Source load balancers?

2011-05-18 Thread Hammer
I've worked with everything over the years. BigIP, CSS, CSM, ACE (blows), NetScaler, say when. I've been thru a few RFPs and bake offs and also evaluated open source options. 1. If you are looking for simple round robin load balancing with decent load capabilities then there are several open

Re: Experience with Open Source load balancers?

2011-05-18 Thread matthew zeier
Recommend: F5 and Citrix Netscaler. If you are looking to combine your L7 FW into your LB then you might lean towards NetScaler. If you are looking at seperating those duties you can look at F5. IRules (F5) are the bomb. Except that under (Mozilla) load, Netscaler fell apart. F5, at the

Re: Experience with Open Source load balancers?

2011-05-18 Thread Andreas Echavez
We're using both an F5 BigIP as well as Nginx (open source software) in a production environment. They both have their merits, but when we recently came under some advanced DDoSes (slowloris, slow POST, and more), we couldn't process certain types of layer 7 insepction/modification because it was

Re: Experience with Open Source load balancers?

2011-05-17 Thread Michael Loftis
On Mon, May 16, 2011 at 5:15 PM, Welch, Bryan bryan.we...@arrisi.com wrote: Greetings all. I've been tasked with comparing the use of open source load balancing software against commercially available off the shelf hardware such as F5, which is what we currently use.  We use the load

Re: Experience with Open Source load balancers?

2011-05-17 Thread Jeff Neuffer Jr
We've use Linux LVS for many many years with success. http://www.linuxvirtualserver.org/ On Mon, May 16, 2011 at 7:15 PM, Welch, Bryan bryan.we...@arrisi.comwrote: Greetings all. I've been tasked with comparing the use of open source load balancing software against commercially available

Re: Experience with Open Source load balancers?

2011-05-17 Thread Tom Hill
On Tue, 2011-05-17 at 11:03 -0600, Michael Loftis wrote: On Mon, May 16, 2011 at 5:15 PM, Welch, Bryan bryan.we...@arrisi.com wrote: Greetings all. I've been tasked with comparing the use of open source load balancing software against commercially available off the shelf hardware such as

Re: Experience with Open Source load balancers?

2011-05-17 Thread Paul Graydon
On 05/17/2011 08:23 AM, Tom Hill wrote: I've worked with open source and commercial solutions, and while the open source systems were almost always far more flexible, and cheaper up front, they certainly required more work to get going.. Once setup and running though both types of solutions had

Re: Experience with Open Source load balancers?

2011-05-17 Thread LaDerrick H.
On Mon, May 16, 2011 at 04:15:45PM -0700, Welch, Bryan wrote: Greetings all. I've been tasked with comparing the use of open source load balancing software against commercially available off the shelf hardware such as F5, which is what we currently use. We use the load balancers for

Re: Experience with Open Source load balancers?

2011-05-17 Thread Mark Andrews
In message BANLkTimxkNx5=__jxd9056fao19v1zo...@mail.gmail.com, Michael Loftis writes: On Mon, May 16, 2011 at 5:15 PM, Welch, Bryan bryan.we...@arrisi.com wrot= e: Greetings all. I've been tasked with comparing the use of open source load balancing sof= tware against commercially

Re: Experience with Open Source load balancers?

2011-05-17 Thread Jimmy Hess
On Tue, May 17, 2011 at 6:23 PM, Mark Andrews ma...@isc.org wrote: [snip] Better still would be for them to return records but until one is ready to do that the negative responses need to be correct. Hm... better would be for load balancers operate transparently at Layer 3 and not tamper

Re: Experience with Open Source load balancers?

2011-05-17 Thread Brent Jones
On Tue, May 17, 2011 at 11:57 AM, LaDerrick H. na...@lacutt.com wrote: On Mon, May 16, 2011 at 04:15:45PM -0700, Welch, Bryan wrote: Greetings all. I've been tasked with comparing the use of open source load balancing software against commercially available off the shelf hardware such as F5,

Re: Experience with Open Source load balancers?

2011-05-17 Thread jkrejci
In response to your query on dnssec in the browser, I use this. https://addons.mozilla.org/en-us/firefox/addon/dnssec-validator/ --Original Message-- From: Jimmy Hess To: Mark Andrews Cc: Welch, Bryan Cc: nanog@nanog.org Subject: Re: Experience with Open Source load balancers? Sent: May

Re: Experience with Open Source load balancers?

2011-05-17 Thread matthew zeier
I'll pile on here too - there's very little of Mozilla's web infrastructure that isn't behind Zeus. +1 for Zeus. Use it in our production network with great success. Magnitudes cheaper than a solution from F5, and doesn't hide the inner workings of the product if you want to do some things

Experience with Open Source load balancers?

2011-05-16 Thread Welch, Bryan
Greetings all. I've been tasked with comparing the use of open source load balancing software against commercially available off the shelf hardware such as F5, which is what we currently use. We use the load balancers for traditional load balancing, full proxy for http/ssl traffic, ssl

Re: Experience with Open Source load balancers?

2011-05-16 Thread William Cooper
S/W vs H/W is really a question rooted in performance and feature needs vs cost... weigh your options carefully. On Mon, May 16, 2011 at 7:15 PM, Welch, Bryan bryan.we...@arrisi.com wrote: Greetings all. I've been tasked with comparing the use of open source load balancing software against

Re: Experience with Open Source load balancers?

2011-05-16 Thread Fabio Mendes
We used Pound (http://www.apsis.ch/pound) on a couple of FreeBSD servers some years ago. Configuration is simple and the software has lots of good and interesting features. The only problem was that always our traffic had a spike, serving pages through it became a nightmare. Eventually we ended