Cabletron Systems SSIM-R8-02 Spécifications télécharger pdf (Page 274)

Load Balancing

254 Enterasys Xpedition User Reference Manual

• SSL persistence: a binding is determined by matching the source IP address and the

virtual destination IP/port address. Note that requests from any source socket with the

client IP address are considered part of the same session. For example, requests from

the client IP address of 134.141.176.10:1024 or 134.141.176.10:1025 to the virtual

destination address 207.135.89.16:80 would be considered one session and would be

directed to the same load balancing server (for example, the server with IP address

10.1.1.1).

• Sticky persistence: a binding is determined by matching the source and destination IP

addresses only. This allows all requests from a client to the same virtual address to be

directed to the same load balancing server. For example, both HTTP and HTTPS

requests from the client address 134.141.176.10 to the virtual destination address

207.135.89.16 would be directed to the same load balancing server (for example, the

server with IP address 10.1.1.1).

• Virtual private network (VPN) persistence: for VPN traffic using Encapsulated

Security Payload (ESP) mode of IPSec, a binding is determined by matching the source

and destination IP addresses in the secure key transfer request to subsequent client

requests. This allows both the secure key transfer and subsequent data traffic from a

particular client to be directed to the same load balancing server. The default port

number recognized by the XP for secure key transfer in VPN is 500; you can use the

load-balance set vpn-dest-port command to specify a different port number.

You can use the load-balance show source-mappings command to display information

about the current list of bindings.

The binding between a client (source) and a load balancing server times out after a certain

period of non-activity. The default timeout depends upon the session persistence level

configured, as shown below:

You can change the timeout for a load balancing group with the load-balance set aging-

for-src-maps command.

The XP also supports netmask persistence, which can be used with any of the four levels of

session persistence. A netmask (configured with the load-balance set client-proxy-subnet

command) is applied to the source IP address and this address is compared to the list of

bindings: if a binding exists, the packet is sent to the same load balancing server

previously selected for this client; if there is not a match, a new binding is created.

Persistence

Level

Default Binding

Timeout

TCP 3 minutes

SSL 120 minutes

Sticky 120 minutes

VPN 3 minutes

1 2 ... 269 270 271 272 273 274 275 276 277 278 279 ... 393 394

Pas de commentaire

Cabletron Systems SSIM-R8-02 Spécifications Page 274