Tag Info

Hot answers tagged

4

I'm afraid that the answer will be "it depends". I had occasion to dig into it a bit when I was working with internet banking security. This was a couple of years ago, though, so it's entirely possible that someone else will come up with something that I forgot or that's changed during those years. Disadvantages with terminating SSL at the load balancer ...


2

You could declare an acl and then do a conditional use_backend statement. Like this: frontend a-frontend-conf # Declare an ACL using path_beg (Path Begins) acl path_images path_beg /images # Use backend server1 if acl condition path_images is fulfilled use_backend server1 if path_images backend server1 [...]


2

You can use a proxy designed for MySQL, such as MySQL Proxy or MaxScale, to not only load balance your read queries, but also to ensure that writes are directed to the master. From the point of view of the clients, there is only one MySQL connection, which is useful for clients which can't make separate connections for reads and writes.


1

Another way, assuming you already have a backend defined for server1 & server2, would be to do the static server selection in the backend, thusly: frontend a-frontend-conf # Declare an ACL using the 'Host' header acl host_domain hdr(host) -i www.domain.com # Use backend 'farm' if acl condition host_domain is fulfilled use_backend farm ...


1

I figured out how to fix my issue. Whilst drookie's suggestion to create and ACL for the reverse proxy and apply the tcp_outgoing_address tag to it almost seemed obvious, I had no clue where to begin, let alone how the ACLs are defined / processed. First I had to figure out how the Squid.conf is interpreted (ie. top-to-bottom for first-matched ACLs) and ...


1

Create an ACL for the reverse-proxy traffic and set tcp_outgoing_address <<LAN-IP-HERE>> for it.


1

You could use MikroTik RouterOS. http://www.mikrotik.com It allows you to setup all 3 internet gateways any way you want and apply any rules you need to load balance the connections. It may have a steep learning curve though depending on your knowledge on networking since you configure everything manually extactly to your needs. There are no wizards. It ...


1

You will need to mark the connections coming from ether3_3G so that you can then mark the replies to be routed back via ether3_3G. Here's an example configuration (not tested) /ip firewall mangle add action=mark-connection chain=prerouting comment="Mark connection so packets from 3G get returned to 3G properly" disabled=no in-interface=ether3_3G ...



Only top voted, non community-wiki answers of a minimum length are eligible