Free the RADIUS

More documents

Recommendations

Info

Free the RADIUS - Problem Solving - It looks bad but ...Expanding 802.1X beyond the niche networkAuthentication FailuresbadDomain macAuth badConfig badUID authFail600050004000300020001000021/9/0728/9/075/10/0712/10/0719/10/0726/10/072/11/079/11/0716/11/0723/11/0730/11/077/12/0714/12/0721/12/0728/12/074/1/0811/1/0818/1/0825/1/081/2/088/2/0815/2/0822/2/0829/2/087/3/0814/3/0821/3/08Authentication Failures• During Advertised ‘service at risk’ periods• Inappropriate DB locking• Peaks in Authentication requests• Hash Synchronisation• Accounting DOSMisconfigured Supplicant• Initial Presentation onto network (2000, XP, Vista)• Strange unexplainable authentication attempts on service start/ stop.
Free the RADIUS - Problem Solving - Database DilemmasExpanding 802.1X beyond the niche networkWhat’s wrong with standard LLL DB Based accounting mechanisms ?• Ties up finite resources processing Accounting data, where Authentication requests should alwayshave priority• Accounting request ‘DOS’ after widespread power loss• Buggy NAS can easily overwhelm DB• Accounting data lost during DB outages• Accounting data lost during Home Server outages when proxying• Doesn’t scale easilyIncreasing reliability and performance• InnoDB not MyISAM (if using MySQL)• Separate pools of database connections for authentication and authorisation requests• Load balance stanza to balance requests between SQL processing nodes• File Based Buffers• FR < v2.0.3 RAD Relay / SQL Relay (File based Buffers)• FR >= v2.0.3 RAD Relay features integrated into server core as Virtual-Server optionFile Based Buffers in FR 2.0.3• Accounting Data not removed until operation has succeeded• Server Auto-Throttles based on the time taken to process previous request and system load• Buffer grows during peak load freeing up resources for authentication• Requests processed in serial fashion, though parallel processing may be coming in the nearfuture.
Page 9 and 10: Free the RADIUSProblem Solving
Page 11: Free the RADIUS - Problem Solving -
Page 15 and 16: Free the RADIUSLooking Forward
Page 17 and 18: Free the RADIUS - Looking Forward -
Page 19 and 20: Free the RADIUS - Looking Forward -
Page 21: Free the RADIUSQuestion Time

Free the RADIUS

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?