Forum Discussion

SSHSSH_97332's avatar
SSHSSH_97332
Icon for Nimbostratus rankNimbostratus
Oct 31, 2012

Load Balancing From Radius

we will use F5 to load balance accouting packtes from Radius server to database servers .

 

the issue is that Radius may send accouting packets with same source port ( ie : same src & dst ips , same src & dst port ) to F5 VIP .

 

F5 will drop this considreing this as duplicate packets or what ?

 

 

 

config
design

5 Replies

Sort By
  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Oct 31, 2012
    Wouldn't the same src and dst ip and port be used in most IP communications, RADIUS or otherwise?
  • SSHSSH_97332's avatar
    SSHSSH_97332
    Icon for Nimbostratus rankNimbostratus
    Nov 01, 2012
    Radisu server sends accounting packets to database servers ( to VIP on F5 containing pool of databsae servers ) .

     

    the idea is that Radius server may send same packet ( same l4 headers ) mutiple times
  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 01, 2012
    Just out of interest, why would it do that? Regardless, I think the only way to find out would be to do a test and monitor with tcpdump. I'd be keen to know what the result is.
  • SSHSSH_97332's avatar
    SSHSSH_97332
    Icon for Nimbostratus rankNimbostratus
    Nov 01, 2012
    Thanks , my traffic is in production si i may need a downtime .

     

    does the below says that F5 will not drop UDP duplicate packets :

     

    http://support.f5.com/kb/en-us/solutions/public/3000/600/sol3605.html

     

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 01, 2012
    Understood. The article isn't too explicit but this is: http://wiki.wireshark.org/DuplicatePackets - doesn't look like you have a problem although you might need to use the feature described in the article you listed.