Share

Server Load Balancing with OpenBSD PF

The forum address has changed, you have been automatically redirected. Please update any bookmarks to use the new URL.

Subscribe

Confused about theory of operation

You are viewing a single message from this topic. View all messages.

  1. 2006-12-15 00:29:39 UTC
    From the descriptions of this project it looks like it is supposed to create and manage pf rules that will load balance a service. Am I wrong about this? How is it really supposed to work.

    Example of my confusion.
    I installed and configured a service.
    smtp|mx pool:\
    :vip=66.219.192.26:\
    :vip-port=25:\
    :poolname=mx:\
    :sitedown=66.219.192.22:method=round-robin:\
    :sitedown-port=25:\
    :service-port=25:\
    :services=2:\
    :0=66.219.192.40:\
    :1=66.219.192.45:\
    :tcppoll:send=:expect=220:

    I ran slbd
    Dec 14 17:22:59 titan slbd[83509]: Using r_refresh of 15000 milliseconds
    Dec 14 17:22:59 titan slbd[83509]: Using configuration file /usr/local/etc/slbdcap
    Dec 14 17:22:59 titan slbd[83509]: VIP 66.219.192.26:25 configured as "66.219.192.26"
    Dec 14 17:22:59 titan slbd[83509]: VIP 66.219.192.26:25 sitedown at 66.219.192.22:25
    Dec 14 17:22:59 titan slbd[83509]: VIP 66.219.192.26:25 added real service 66.219.192.40:25
    Dec 14 17:22:59 titan slbd[83509]: VIP 66.219.192.26:25 added real service 66.219.192.45:25
    Dec 14 17:22:59 titan slbd[83509]: TCP poll succeeded for 66.219.192.40:25, marking service UP
    Dec 14 17:22:59 titan slbd[83509]: TCP poll succeeded for 66.219.192.45:25, marking service UP

    I verified that slbd had opened /dev/pf
    # fstat -p 83509
    USER CMD PID FD MOUNT INUM MODE SZ|DV R/W
    root slbd 83509 root / 2 drwxr-xr-x 1024 r
    root slbd 83509 wd / 2 drwxr-xr-x 1024 r
    root slbd 83509 text /usr 51106 -rwxr-xr-x 26866 r
    root slbd 83509 0 /dev 25 crw-rw-rw- null rw
    root slbd 83509 1 /dev 25 crw-rw-rw- null rw
    root slbd 83509 2 /dev 25 crw-rw-rw- null rw
    root slbd 83509 3* local dgram c70e78c0 <-> c69e508c
    root slbd 83509 4 /dev 87 crw------- pf rw

    I checked the current pf rules
    # pfctl -s nat -s rules
    pass in all
    pass out all
    (just my default rules)

    I even tried connecting to the VIP on the service port, and got nothing.

    What am I missing here?
< Previous | 1 | Next >

Add a Reply

This forum does not allow anonymous participation.

Log in to add a reply. Not registered? Create an account to participate and receive email updates when replies are posted to this topic.