From owner-freebsd-questions@FreeBSD.ORG Mon Mar 23 09:34:38 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C61A11065672 for ; Mon, 23 Mar 2009 09:34:38 +0000 (UTC) (envelope-from nvass9573@gmx.com) Received: from mail.gmx.com (unknown [213.165.64.42]) by mx1.freebsd.org (Postfix) with SMTP id 32FF38FC1B for ; Mon, 23 Mar 2009 09:34:38 +0000 (UTC) (envelope-from nvass9573@gmx.com) Received: (qmail invoked by alias); 23 Mar 2009 09:34:33 -0000 Received: from adsl58-81.ath.forthnet.gr (EHLO [192.168.1.5]) [77.49.89.81] by mail.gmx.com (mp-eu002) with SMTP; 23 Mar 2009 10:34:33 +0100 X-Authenticated: #46156728 X-Provags-ID: V01U2FsdGVkX1/aMsFEXD7agjuXLguGydiOpXBRgQb53tEI+NktwL QsYjWSJCp8PpTI Message-ID: <49C75788.70102@gmx.com> Date: Mon, 23 Mar 2009 11:34:00 +0200 From: Nikos Vassiliadis User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: Hari Emani References: <27821.85381.qm@web30906.mail.mud.yahoo.com> In-Reply-To: <27821.85381.qm@web30906.mail.mud.yahoo.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Y-GMX-Trusted: 0 X-FuHaFi: 0.54 Cc: freebsd-questions@freebsd.org Subject: Re: CARP Load Balance by CUP - Memory - Ethernet Usage X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Mar 2009 09:34:39 -0000 Hari Emani wrote: > Good Day every one! > > We have a situation and we are looking for a solution (the client is > specific to implement this way): The client must be wrong! > We are using FreeBSD FW cluster (2 units) for our DMZ zone. We are > using CARP for VIP and round robin load balance. The result is not > always balance, most of the times it is 80/20. We are looking at the > following solution: Implement a solution that provides LB based on > the following factors: > > 1. CPU Hm, let's say that a host needs to send a packet to VIP, how will it know the CPU utilization of the FWs and choose the right one? > 2. Memory Hm, same as above plus s/CPU/memory/ > 3. Ethernet traffic utilization That's feasible. But it's the sender, that is the switch, who knows at what rate it sends to each FW. The thing with IP forwarding load balancing is that it must be done in a non-intrusive way, you don't want to add additional logic to the existing users of the network. You don't to change the infra- structure. > Theoretically I can think when a packet comes to FW1, if it is busy > (say CPU is 80%) then we need to implement a solution to send the > packet to FW2 and vice verse. I heard that some tools exist to > complement CARP for this purpose, but could not find at Google. Since FW1 will have to process the packet, that is forward the packet to FW2, why not forward it towards its destination? How forwarding to FW2 would be more lightweight? > > I would highly appreciate any suggestions on this (or alternate > solutions – we know we can use LB appliances, but we will have to > many of them for several other servers too). > > I would appreciate your help or any alternate suggestions on how we > can achieve this solution (apart from CARP). The new CARP in OpenBSD provides an additional mechanism to do load-balancing. This new mechanism achieves better load- balancing with a downside. Read more here: http://www.openbsd.org/cgi-bin/man.cgi?query=carp That's not in FreeBSD for the time being. Also, it has nothing to do with your requirements about memory, CPU and ethernet usage. Nikos