<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Arial","sans-serif";
color:#244061;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Arial","sans-serif";
color:#244061;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>David,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>That should not be an issue.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>You would set up your acl’s for each of your networks:<o:p></o:p></span></p><p class=MsoNormal><i><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>acl networkA x.x.x.x<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>acl networkB x.x.x.y …<o:p></o:p></span></i></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>Then set the backends to use:<o:p></o:p></span></p><p class=MsoNormal><i><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>use_backend destNodeA if networkA<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>use_backend destNodeC if networkD<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'><o:p> </o:p></span></i></p><p class=MsoNormal><i><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>default_backend destNodeA<o:p></o:p></span></i></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>Then your backends:<o:p></o:p></span></p><p class=MsoNormal><i><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>backend destNodeA<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>…<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>Server nodeA z.z.z.z:pp options weight 256<o:p></o:p></span></i></p><p class=MsoNormal><i><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>Server nodeB z.z.z.y:pp options weight 1<o:p></o:p></span></i></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>So for each network you can specify which backends to use, how often to check and even what port to connect on.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'><o:p> </o:p></span></p><div><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'>Regards,</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#244061'><br></span><b><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'>Ryan Naef</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#244061'><br></span><b><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'>Systems Administrator</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#244061'><br></span><b><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'>Web Development</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#244061'><br></span><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:#244061'><br></span><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:#244061'>Direct: (303) 532-4536, (303) 682-3621<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:#244061'>Toll Free: (866) 764-8324</span><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:#244061'><br></span><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:#244061'>Fax: (877) 495-9165</span><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:#244061'><br></span><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:#244061'>Email:</span><u><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:blue'><a href="MAITO:%20rnaef@aspdd.com">rnaef</a>@aspdd.com</span></u><u><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:blue'><br></span></u><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:#244061'>Web: <a href="blocked::http://www.aspdd.com/" title="blocked::http://www.aspdd.com/ http://www.aspdd.com/">aspdd.com</a></span><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:#244061'><br><br></span><span style='font-size:7.5pt;font-family:"Calibri","sans-serif";color:#244061'>This message and accompanying documents are covered by the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, and contain information intended for the specified individual(s) only. This information is confidential. If you are not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, copying, or the taking of any action based on the contents of this information is strictly prohibited. If you have received this communication in error or wish to be removed from the Email list, please notify us immediately by e-mail, and delete the original message.</span><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:#244061'><o:p></o:p></span></p></div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='margin-left:.5in'><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> clue-bounces@cluedenver.org [mailto:clue-bounces@cluedenver.org] <b>On Behalf Of </b>David L. Willson<br><b>Sent:</b> Thursday, October 30, 2014 9:21 AM<br><b>To:</b> CLUE's mailing list<br><b>Subject:</b> Re: [clue] load-balancing<o:p></o:p></span></p></div></div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p><div><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.5in'><span style='color:black'>Thanks Ryan,<br><br>Here's the thing I need that might be hard, I need to be able to satisfy these assertions: <br><br>For source networks A, B, and C, dest-node A is preferred, B is a usable standby, but dest-node C should never be tried (even if it's up).<br>For source networks C, D, and E, dest-node C is preferred, B is a usable standby, but dest-node A should never be tried (even if it's up).<br><br>Do you think HAProxy is up to that?<o:p></o:p></span></p><div><p class=MsoNormal style='margin-left:.5in'><span style='color:black'>--<br>David L. Willson<br>Teacher, Engineer, Evangelist<br>RHCE+Satellite CCAH Network+ A+ Linux+ LPIC-1 UbuntuCP NovellCLA<br>Mobile 720-333-LANS(5267)<br><a href="http://sofree.us">http://sofree.us</a><br><br>This is a good time for a r3VOLution.<o:p></o:p></span></p></div><p class=MsoNormal style='margin-left:.5in'><span style='color:black'><o:p> </o:p></span></p><div class=MsoNormal align=center style='margin-left:.5in;text-align:center'><span style='color:black'><hr size=2 width="100%" align=center id=zwchr></span></div><blockquote style='border:none;border-left:solid #1010FF 1.5pt;padding:0in 0in 0in 4.0pt;margin-left:3.75pt;margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>David,</span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>While I do not profess to be an HAProxy expert, we have used it to check most of the boxes on your list in the past. </span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>You can use the weight parameter on your backend servers to specify where the traffic is preferred – a value of 256 for your primary and 1 as your failover should accomplish what you are looking for. </span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>You can also write IP based ACL’s to set traffic from each network to specific backends. </span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'> </span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'>There are some limitations – HAProxy will only support TCP, and I have had issues with some ssl. </span><span style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'> </span><span style='color:black'><o:p></o:p></span></p><div><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.5in'><b><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'>Regards,</span></b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#244061'><br></span><b><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'>Ryan Naef</span></b><span style='color:black'><o:p></o:p></span></p></div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#244061'> </span><span style='color:black'><o:p></o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='margin-left:1.0in'><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'> <a href="mailto:clue-bounces@cluedenver.org">clue-bounces@cluedenver.org</a> [<a href="mailto:clue-bounces@cluedenver.org">mailto:clue-bounces@cluedenver.org</a>] <b>On Behalf Of </b>David L. Willson<br><b>Sent:</b> Thursday, October 30, 2014 7:43 AM<br><b>To:</b> CLUE's mailing list<br><b>Subject:</b> [clue] load-balancing</span><span style='color:black'><o:p></o:p></span></p></div></div><p class=MsoNormal style='margin-left:1.0in'><span style='color:black'> <o:p></o:p></span></p><div><p class=MsoNormal style='margin-left:1.0in'><span style='color:black'>I am looking for an intelligent load-balancer. It needs to understand proximity / preference. I want to be able to send all the clients from (these networks) to this node, unless it's down, or fully-loaded, or otherwise uninterested in new connections, then send them to this node, instead.<br><br>I don't mind if I have to setup the preference rules (which networks prefer which servers), but it would be cool if I didn't have to.<o:p></o:p></span></p><p style='margin-left:1.0in'><span style='color:black'> <o:p></o:p></span></p><p style='margin-left:1.0in'><span style='color:black'>I'd *strongly* prefer a solution that doesn't generate vendor lock-in. ie: I don't mind paying for it, but I'd like to preserve the freedom to choose *who* to pay.<o:p></o:p></span></p><p style='margin-left:1.0in'><span style='color:black'> <o:p></o:p></span></p><p style='margin-left:1.0in'><span style='color:black'>It would be really great if someone that has a lot of experience with HAProxy confidently said something like, "Oh yeah, it does all that. Just do this and this, and that, and it works great, lasts a long time, and you'll lose weight doing it."<o:p></o:p></span></p><p style='margin-left:1.0in'><span style='color:black'> <o:p></o:p></span></p><div><p class=MsoNormal style='margin-left:1.0in'><span style='color:black'>--<br>David L. Willson<br>Teacher, Engineer, Evangelist<br>RHCE+Satellite CCAH Network+ A+ Linux+ LPIC-1 UbuntuCP NovellCLA<br>*killed my phone on Sunday. This space for rent.*<br><a href="http://sofree.us" target="_blank">http://sofree.us</a><br><br>This is a good time for a r3VOLution.<o:p></o:p></span></p></div><p class=MsoNormal style='margin-left:1.0in'><span style='color:black'> <o:p></o:p></span></p></div><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Helvetica","sans-serif";color:black'><br>_______________________________________________<br>clue mailing list: <a href="mailto:clue@cluedenver.org">clue@cluedenver.org</a><br>For information, account preferences, or to unsubscribe see:<br><a href="http://cluedenver.org/mailman/listinfo/clue">http://cluedenver.org/mailman/listinfo/clue</a><o:p></o:p></span></p></blockquote><p class=MsoNormal style='margin-left:.5in'><span style='color:black'><o:p> </o:p></span></p></div></div></body></html>