Re: [squid-users] Squid + F5 balancing doesnt work!!!

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 2 Jul 2008 14:09:01 +1200 (NZST)

> Hi guys,
>
> I have 2 squid boxes working good alone. My customer ask me to balance
> them
> using his BIGIP F5. The fact is that when I balance them without
> percistance
> I got this at log (on both servers):
>
> 1214974554.906 0 99.90.40.253 TCP_DENIED/407 3249 GET
> http://www.presidencia.gob.mx/imgs/edomayor_over.gif a2 NONE/- text/html
>

You can't load-balance an authenticated session against two completely
independent servers of any kind without authenticating against each
seperately.

You need to configure the BIGIP F5 so that they simulate 'sessions'. And
certain sources always get sent to the same Squid.

Sorry, I don't know how to help with the actual F5 config. Maybe someone
else will.

Amos

> if we use percistance, it works, but we can stop using of sharing
> usernames.
> Balancig schema is like this:
>
> user -> balancer f5 -> squid1
> \->squid2
>
> Squid is configured with LDAP-digest auth.
Received on Wed Jul 02 2008 - 02:09:06 MDT

This archive was generated by hypermail 2.2.0 : Wed Jul 02 2008 - 12:00:01 MDT