[22639] in Kerberos
RE: Kerberos behind load balancer?
daemon@ATHENA.MIT.EDU (Kasundra, Digant)
Wed Oct 6 13:42:44 2004
Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Wed, 6 Oct 2004 12:42:07 -0500
Message-ID: <2BF615FBFB12BB47B6501D04376E657A0B0A7C@MAILFS1.uta.edu>
From: "Kasundra, Digant" <digant@uta.edu>
To: "Tillman Hodgson" <tillman@seekingfire.com>, <kerberos@mit.edu>
Content-Type: text/plain;
charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
I should have added, using anycast might be doable, depending on what kind of network environment it would need. I'm not familiar with what kind of layout you would want to make this work. And of course, the same "politics" might not let us do this either....
-----Original Message-----
From: kerberos-bounces@mit.edu on behalf of Tillman Hodgson
Sent: Wed 10/6/2004 12:15 PM
To: kerberos@mit.edu
Subject: Re: Kerberos behind load balancer?
On Wed, Oct 06, 2004 at 12:07:23PM -0500, Kasundra, Digant wrote:
> I agree that the load is not an issue. But with out DNS round-robin,
> and without the load-balancer, we'd have to arbitrarily point our
> systems and services at one of the slaves. If that slave goes down,
> we'd have to scramble to see who all was pointing to it and change
> them to point to the other place.
Anycast. Kerberos auth is UDP, after all.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
