pf (+ relayd?) as lvs replacement

[CZUCZY Gergely]

Hello,

A somewhat similar can be achived using relayd, but this kind of load balancing
shouldn't be done on L2/L3 level. This kind of load balancing should be done on
Layer7 with some application level load balancers. That way you can also do
more then this (like sanitizing the requests before they get to the actual
servers).

Some projects exists out there to do this, like pound[1], or also nginx has
some features for this propose, and even apache2.2 is being extended into this
direction.

[1] http://www.apsis.ch/pound/

On Fri, 25 Apr 2008 08:38:28 +0200
"Morten Grunnet Buhl" <mortengb at gmail.com> wrote:

> Our setup:
> 
>                     +--------------------+
>                     |        Client      |
>                     +----------+---------+
>                                |
>                                |
>                                |
> +------------------------------+-------------------------------+
> |                     The World Wide Web (TM)                  |
> +------------+-----------------+------------------+------------+
>              |                 | Ext              |
>              |          +------+------+           |
>              |          |  Gentoo/LVS |           |
>              |          +------+------+           |
>              | Ext             |                  | Ext
>              |                 |                  |
>              |      +----------+-----------+      |
>              |      |         Int          |      |
>            +-+------+-+                 +--+------+-+
>            |  FBSD1   |                 |   FBSD2   |
>            +----------+                 +-----------+
> 
> GentExtif XXX.XXX.XXX.10
> GentIntif 10.0.0.10
> 
> FBSD1Extif XXX.XXX.XXX.11
> FBSD1lo0alias XXX.XXX.XXX.10
> FBSD1Intif 10.0.0.11
> 
> FBSD2Extif XXX.XXX.XXX.12
> FBSD2lo0alias XXX.XXX.XXX.10
> FBSD2Intif 10.0.0.12
> 
> Gentoo/LSV
> manipulates the package from a client and sends it to FBSD(1|2)
> FBSD(1|2) then returns data directly to the client
> 
> 
> As you can see, all of our machines have external ip's.
> This diagram is a scaled down version of our setup. The Gentoo/LVS
> machine handles more 'clusters' of (more than two) machines.
> These machines are sending a lot more traffic than they are
> receiving. Its therefor not feasible to route the traffic out
> through one single machine as it would quickly become the bottleneck.
> 
> This setup is transparent to our users and is working quite well.
> 
> Motivation:
> All our 'back-end' machines are now running *BSD. The company's only
> Linux guy/defender/admin has left us.
> We would therefor like to completely loose linux in our setup.
> We have seen that IPVS has been ported to FreeBSD but have not had any
> luck finding people that use it on a larger scale. Furthermore we would
> like to make this solution more clean (if possible) using pf.
> 
> 
> 
> Question:
>  Is this possible with pf (maybe with relayd)?
> 
> 
> Thanks in advance for any information (positive or negative) that might
> help us on our way.
> 
> /mgb
> _______________________________________________
> freebsd-pf at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"


-- 
Üdvölettel,

Czuczy Gergely
Harmless Digital Bt
mailto: gergely.czuczy at harmless.hu
Tel: +36-30-9702963
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20080425/9ce189f2/signature.pgp