Date: Wed, 16 Jan 2019 15:10:26 +0000 From: Mark Blackman <mark@exonetric.com> To: Pete French <petefrench@ingresso.co.uk> Cc: freebsd-stable@freebsd.org Subject: Re: Any suggestions for a layer 3 load ablancer for 12, as relayd doesnt work anymore Message-ID: <2CAF8A7F-41F2-44BC-B029-C64E22F0FA7D@exonetric.com> In-Reply-To: <f276b83a-e57b-a9f5-9186-e2b5116f9962@ingresso.co.uk> References: <E1gj4tQ-000MGi-0H@dilbert.ingresso.co.uk> <1547491459.1113392.1634330440.3BE6B9CF@webmail.messagingengine.com> <3CD6B22B-B35C-4B9C-BDBA-D2E928435F91@exonetric.com> <f276b83a-e57b-a9f5-9186-e2b5116f9962@ingresso.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
> On 15 Jan 2019, at 14:43, Pete French <petefrench@ingresso.co.uk> wrote: >=20 >=20 >=20 > On 15/01/2019 10:24, Mark Blackman wrote: >>> On 14 Jan 2019, at 18:44, Dave Cottlehuber <dch@skunkwerks.at> wrote: >>> haproxy does proper failover and allows custom health checks either via >>> URL or real world traffic of external scripts. Traefik has lots of >>> container oriented features. >>> Dave >> There=E2=80=99s also the very venerable (hence reliable) HTTP proxy/load b= alancer, Apache Traffic Manager, https://trafficserver.apache.org >=20 > Thanks for the suggestions - unfortunately both of those (unless I > misread them) terminate the TCP connection and make a new one to > the backends. I was after something where I can see the original IP > address on the socket. Though I could put a procy in front and add > the headers I suppse, but thats a biut more work as it involves changing > the code. >=20 > Interested in the apache traffic manager - I hadnt come across that > one before, tahnks, These days, most =E2=80=9Cproper=E2=80=9D application designs have a layer i= n front of the application that handles all of the traffic management consid= erations and deliberately takes away direct connectivity from the client to t= he application, inserting the original client IP address into the request he= aders as just more metadata associated with the request. Things like Zuul, H= AProxy, Apache, Nginx, Traffic Manager, Traefik and all the others are meant= to handle the nitty gritty of the connection between the client and your ap= plication, passing on only trusted,normalised requests to the underlying app= lication.=20=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2CAF8A7F-41F2-44BC-B029-C64E22F0FA7D>