Coming from a background assisting companies large and small to get the most from open source solutions. Aaron found joining the support team at Loadbalancer.org a natural progression. Aaron’s interests include distro-hopping, B Movies and quality time spent with his family.
The only real reason for separate network ports is physical redundancy. Because the other primary reason (security segregation) can be easily implemented using VLANs.
Look, let’s make this very clear, we love F5, we think they are awesome, the best ADC in the market. But sometimes they make you want to cry!
I ran into a problem recently where a customer was working to load balance NFS to their scale-out NAS product, they were saying that it mounted fine but “showmount -e” just wouldn’t work properly from their Linux client.
Organizations are moving away from the traditional data center model, and favoring a hybrid approach to hosting their systems and applications, that involves multiple sites, providers and even cloud environments.
Let's look at the best way to use the WAF with as little pain as possible!
Find out why Werner Vogels' comments ring especially true for healthcare data.
I often hear that AWS seems expensive, in most cases, this is because people are not fully aware of the best cost-saving practices. Amazon offers many tools to help keep costs down and is always working to improve on these. One such recent improvement is the new "AWS Savings Plans".
We were delighted last week to host Smoothwall for a day with our team. Fuelled by coffee and Krispy Kreme doughnuts, our discussions helped us learn from one another so that we can work together even more effectively.
The plan is to use an inexpensive pair of load balancers - using Layer 4 DR mode for maximum throughput and transparency - to load balance some more mid to high-end load balancers. This enables us to handle the SSL offload at a much more affordable price than simply buying a big box.
Direct Server Return (DSR) is my favorite way to load balance application servers because it’s simple, transparent, and super fast.
Yes, it's the end of an era... after many years arguing that GSLB has no place on a proper load balancer, I've finally found a solid reason to add one to our product. Yes, you read that right! I've officially surrendered and given you a new GSLB to play with...!
Nutanix offers a hyper-converged infrastructure (HCI) platform that integrates virtualization, computing, networking, storage, and security resources into a single system.
L3 DSR is an alternative technique to achieve direct server return at Layer 3. Instead of using an IPIP tunnel like LVS-TUN it changes the destination IP address like LVS-NAT when sending the traffic to the real server.
LVS-DR and LVS-TUN are both forms of Direct Server Return where the load balancer only has to deal with one half of the connection.
Using client certificates for security is a pretty cool idea! You can protect an entire application or even just a specific Uniform Resource Identifier (URI) to only those that provide a valid client certificate.
How frustrating do you find it when hackers or robots fill in your website forms with "Buy Viagra Now!" type spam?
Technically, the only mode on a load balancer that is a real Reverse Proxy is Layer 7 mode. Whereas all Layer 4 load balancing modes such as NAT, DR and TUN are nothing like a reverse proxy. The clients are effectively talking directly (transparently) to the backend servers.
The appliance works quite nicely in a oVirt environment and should work just as well with a full Red Hat’s Enterprise Virtualization environment (RHEV)!
Let’s Encrypt offers us a free way to get SSL certificates with the aim of being less complex than other current solutions.
In part one we were introduced to Polaris-GSLB which is a cool little open source GSLB solution. In part two of this Blog I’m going to show you how to build Polaris-GSLB on CentOS 7.
Here at Loadbalancer.org we’re not known for being huge fans of GSLB solutions as some of our customers may already know.
We can write custom health checks specific to your environment checking availability of servers as well as other backend systems such as REST servers, databases and storage.
Once HAProxy is running transparently, it will allow the real server to see the client IP so the real server will reply directly back to the client bypassing the load balancer.
Policy Based Routing is a clever way to give us more control over which routing path connections will take. It allows us to specify custom routing tables and then add rules offering fine grained control over which routing table a connection will use.
Let me first say that I'm not really a fan of PCI scanners. It's not so much that I'm anti security scanners but rather that scanning for vulnerabilities based on only the version number a package returns seems rather simplistic to me.