[f-nsp] ServerIron FBS16 -- Howto load balance remote servers (aka non physically connected)

[Nils Domrose]

Hi Unai,

yes you can have that!

Here is my current config:

-----snipp-------
server force-delete
server no-fast-bringup
server predictor round-robin
server syn-def 6


server port 80
  tcp

server port 3307
  tcp

server source-ip 10.1.1.251 255.255.255.0 10.1.1.1
!
!
!
!
!
!
!
!
!
!
!
!
!
server remote-name app1 10.2.2.2
  source-nat
  port http
  port http url "HEAD /"
  port http l4-check-only
!
server remote-name app2 10.2.2.3
  source-nat
  port http
  port http url "HEAD /"
  port http l4-check-only
!
server real db1 10.1.1.2
  source-nat
  port 3307
!
server real db2 10.1.1.3
  source-nat
  port 3307 disable
!
!
server virtual virtual-app-tmp.prod 10.215.124.202
  sym-priority 255
  port 80
  bind 80 app1 80 app2 80
!
server virtual virtual-db 10.1.1.200
  port 3307
  bind 3307 db1 3307 db2 3307
!
ip address 10.1.1.253 255.255.255.0
ip default-gateway 10.1.1.1
------snipp------

as you can see, server app1 and app2 are remote servers while server  
db1 and db2 are local servers. We use source-nat in both cases since  
we connected the LB's in one arm configuration so they are not in the  
way of traffic.

If you run into problem because the remote server is somehow  
firewalled and cannot be pinged, you may need to put in something like:

server no-remote-l3-check

because then the the Serveriron does not ping the remote server but  
sends an ARP request to the default Router - afterwards you can of  
cause tell the serviron to run l4-l7 checks.



Nils



On Mar 14, 2007, at 6:55 AM, Unai Rodriguez wrote:

> Thank you so much!!
>
> I am trying to reconfigure the whole ServerIron again. I am using  
> it for
> two different set of servers.
>
> One set is physically connected to it and the other is not (remote).
>
> When I activate the "Source NAT" option, the traffic stops reaching
> anywhere (connected servers and remote servers).
>
> Do you think it's possible to have connected and remote server  
> mixed at
> the same time and load balance among them?
>
> Thank you,
> unai
>
> dalton wrote:
>>
>> hi Unai,
>> I use cli,
>>
>> here are the options we have for this which should be enough to  
>> get it working:
>>
>> you need a server source-ip line to set the nat ip of the  
>> serveriron (to force
>> traffic back to the server iron):
>>
>> server source-ip 10.1.1.100 255.255.255.0 0.0.0.0 (x.x.x.x is an  
>> ip in the net
>> of the LB)
>>
>> Real Server config looks like this:
>>
>> server remote-name server1-locationA 10.1.1.1
>>  port default disable
>>  source-nat
>>  port http
>>  port http keepalive
>>
>> server remote-name server1-locationB 10.2.2.1
>>  port default disable
>>  source-nat
>>  port http
>>  port http keepalive
>>
>> server virtual vip 10.1.1.1
>>  predictor least-conn
>>  port default disable
>>  port http
>>
>> Make sure you have DSR turned off on the vip.
>>
>> Good luck,
>> Dalton
>>
>> on Wed, Mar 14, 2007 at 12:13:10PM +0800, Unai Rodriguez wrote:
>>> Dalton,
>>>
>>> Thank you so much. The options that the ServerIron gives me  
>>> through the
>>> web based management tool are these:
>>>
>>> --------------------------------------------------
>>> Real ServerServer Name:	(name, blank by default)
>>> Server IP: (IP address, 0.0.0.0 by default)
>>> Maximum Connections: (number, 1000000 by default)
>>> Weight:	(number, 1 by default)
>>> Host Range: (number, 1 by default)
>>> Remote:	(yes/no)
>>> Source NAT: (yes/no)
>>> --------------------------------------------------
>>>
>>> I have attached a screen-shot.
>>>
>>> 1) Do you use the web based tool or you (in your case) can do  
>>> this only
>>> through the command line interface (CLI)?
>>>
>>> 2) Does your web based management tool show the same options?
>>>
>>> Thank you so much!
>>>
>>> unai
>>>
>>> dalton wrote:
>>>> Hi,
>>>>
>>>> I use foundry serveriron XL which allow the option of
>>>> "server remote-name" (for real servers) which allows you to specify
>>>> servers   which are in a different layer 2 and layer 3 space  
>>>> from the
>>>> load balancer.
>>>>
>>>> We for ex. are using this configurtion to load balance app  
>>>> servers between
>>>> 2 datacenters. You need to turn off DSR and use server source-ip  
>>>> to force
>>>> return traffic back to the foundry.
>>>>
>>>> -dalton
>>>>
>>>> On Wed, Mar 14, 2007 at 09:07:20AM +0800, Unai Rodriguez wrote:
>>>>> Dear all,
>>>>>
>>>>> I am currently trying to make a Foundry ServerIron FBS16 load  
>>>>> balance
>>>>> two web servers which are not physically connected to it. It's  
>>>>> HTTP
>>>>> traffic on port 80.
>>>>>
>>>>> I have been using this hardware load balancer for months. I am  
>>>>> currently
>>>>> balancing a number of services, including HTTP and TCP traffic.  
>>>>> All
>>>>> these servers that I am sending traffic to from the ServerIron  
>>>>> load
>>>>> balancer are physically connected to it.
>>>>>
>>>>> I have been looking for information on this but I can't find  
>>>>> the right
>>>>> one. Is there anyone that could point me in the right  
>>>>> direction? What
>>>>> short of option(s) or requirements need to be met in order to  
>>>>> have the
>>>>> load balancer send traffic to non-physically connected servers?
>>>>>
>>>>> Thank you so much. I really appreciate any help.
>>>>>
>>>>> With Best Wishes,
>>>>> Unai Rodriguez.
>>>>> _______________________________________________
>>>>> foundry-nsp mailing list
>>>>> foundry-nsp at puck.nether.net
>>>>> http://puck.nether.net/mailman/listinfo/foundry-nsp
>>
>>
> _______________________________________________
> foundry-nsp mailing list
> foundry-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/foundry-nsp