[f-nsp] cookie persistence in DSR mode

Nils Domrose nils at domrose.net
Fri Jun 1 16:51:44 EDT 2007


Hi,

in addition since this question is raised quite often i would like to  
add that
one just need to consider the way how cookie based (hashing)  
persistence normaly works.

The SLB first needs to first read the Set-Cookie Header in the  
Response Header of a Requests.
This implies that the return Packet must be send through the  
Loadblancer.

In the next request, the SLB will reade the Cookie Header Field and  
lookup the Hashtable to ensure that the request is send to the same  
server which generated the Set-Cookie Header Value.


Therefore this cannot work in DSR secenarios where the Return Traffic  
does not pass the Loadbalancer.


Nils



On Jun 1, 2007, at 9:34 PM, Youssef Ghorbal wrote:

> Hi,
>
> 	L7 switching (like cookie persistance or URL switching) are not
> compatible with DSR mode.
> 	Even if cookie persistance does not require paquets to go back thow
> the LB, it stills a L7 feature and consequently not compatible with
> DSR mode.
>
> Youssef Ghorbal
> Netplus Communication
>
> -----------
> On Jun 1, 2007, at 7:14 PM, Stefan Hegger wrote:
>
>> Hi,
>>
>> just a question that I'm not able to solve with my documentation.
>>
>> To use a TCPwrapper we need the Client IP address. We do not want
>> to use the
>> LB as default GW, so we thought about using the LB in DSR mode.
>>
>> Now my question, is it possible to run the LB in DSR mode and use
>> cookie
>> persistence? We are running the 450 HW.
>>
>> Best Stefan
>> -- 
>> Stefan Hegger
>> Internet System Engineer
>>
>> Lycos Europe GmbH
>> Carl-Bertelsmann Str. 29
>> Postfach 315
>> 33312 Gütersloh
>>
>> Phone:
>> Tel: +49 5241 8071 334
>> Fax: +49 5241 80671 334
>> Mobile: +49 170 1892720
>>
>> Sitz der Gesellschaft: Gütersloh
>> Amtsgericht Gütersloh, HRB 2157
>> Geschäftsführer: Christoph Mohn
>>
>>   <http://www.lycos-europe.com/L/A/>
>> _______________________________________________
>> foundry-nsp mailing list
>> foundry-nsp at puck.nether.net
>> http://puck.nether.net/mailman/listinfo/foundry-nsp
>
> _______________________________________________
> foundry-nsp mailing list
> foundry-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/foundry-nsp




More information about the foundry-nsp mailing list