[K12OSN] Need suggestions for poor man's load balancing....

[Martin Woolley]

On Tuesday 09 August 2005 14:32, Les Mikesell wrote:
>  I've always thought it should "just work" to have each k12ltsp
> server run its own dhcp server with non-overlapping ranges (this
> is different from the backup dhcp server scenario).  

It just works if you have each k12ltsp server runs as a dhcp server, each with 
the same address range.  I know this to be a fact, 'cus it is what we do, so 
yes it will just work with non-overlapping ranges.

You can use iptables to limit a particular client access to specific servers.    
What you want is something like 
-A INPUT -m mac --mac-source 00:11:85:E3:C7:39 -j ACCEPT
-A INPUT -m mac --mac-source 00:11:85:E3:C8:F2 -j ACCEPT
-A INPUT -i eth1 -j REJECT --reject-with icmp-port-unreachable
which will only accept connections from these two specific mac addresses or
-A INPUT -m mac --mac-source 00:11:85:E3:C9:17 -j REJECT --reject-with 
icmp-port-unreachable
-A INPUT -m mac --mac-source 00:11:85:E3:C8:FF -j REJECT --reject-with 
icmp-port-unreachable
which will accept connections from everything except these two mac addresses. 

We use the iptables method.  We have two separate ltsp clusters, one with 30 
clients connecting to 2 servers, and one with 90 clients connecting to 6 
servers. Each server has be connected to the same lot of network cabling (to 
connect to the ypserver, internet, samba, etc) and yet using the above 
method, clients are only served by their designated servers.  Before we used 
the iptables method, sometimes clients would connect to an invalid server.
-- 
Regards
Martin Woolley
ICT Support
Handsworth Grammar School
Isis Astarte Diana Hecate Demeter Kali Inanna


*************************************************************
This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity 
to whom they are addressed. If you have received this email 
in error please notify postmaster at bgfl.org

The views expressed within this email are those of the 
individual, and not necessarily those of the organisation
*************************************************************