Archive for the ‘Linux’ Category

Load balancing Windows Terminal Server – HAProxy and RDP Cookies

Tuesday, October 27th, 2009

When you have users depending on Windows Terminal Services for their main desktop, it’s a good idea to have more than one Terminal Server. RDP, however, is not an easy protocol to load balance; sessions are long-lived and need to be persistent to a particular server, and users may connect from different source addresses during one session.

The current development version of HAProxy has made an important step forward in making this possible. Thanks to work by Exceliance, it now supports RDP Cookies, offering a solution to the persistence problem.

(more…)

Transparent proxy of SSL traffic using Pound to HAProxy backend patch and howto

Monday, July 20th, 2009

OK so I’ve previously blogged about how to get TPROXY and HAProxy working nicely together. But what if you want to terminate SSL traffic on the load balancer in order to use HaProxy to insert cookies in the standard HTTP stream to the backend servers?

Many thanks to Krisztián Ivancsó  for working on the TPROXY patch for Pound for us, we can finally do this!

(more…)

How to upgrade VMware tools on ClusterLoad ESX or Loadbalancer.org VA

Wednesday, May 13th, 2009

VMware tools are based on  proprietary modules for the Linux Kernel and therefore need compiling from source to install.

NB. Unless you have a specific reason to upgrade the supplied tools don’t worry about it. Our appliances make heavy use of the 64Bit e1000 network driver which is part of the default kernel, the appliance doesn’t strictly need any of the extra VMware tool functionality.

(more…)

How to Setup Subversion on Ubuntu

Monday, March 16th, 2009

For our software development we use Subversion - a powerful free tool for version control of files. Any file types are supported, even binary files. To be able to work with Subversion you have to setup a Subversion server. Then you can access the server from Subversion clients.

This blog entry shows one way to setup Subversion server on a Linux machine.

(more…)

Configure HAProxy with TPROXY kernel for full transparent proxy

Wednesday, February 11th, 2009

Standard Kernel builds don’t support TPROXY ( 2.6.28 does now!).
For example if you use HaProxy as the load balancer then all of the backend servers see the traffic coming from the IP address of the load balancer. TPROXY allows you to make sure the backend servers see the true client IP address in the logs.

Ps. An easier alternative is inserting the clients ip in the x-forwarded-for header (option forwardfor).

For TPROXY to work you need three things:

1) TPROXY compiled into the linux kernel
2) TPROXY / Socket compiled into netfilter / iptables (due in v1.4.3?)
3) HaProxy compiled with the USE_LINUX_TPROXY option

The TPROXY patch for Linux Kernel 2.6.25.11 is here:
http://www.balabit.com/downloads/files/tproxy/tproxy-kernel-2.6.25-20080519-165031-1211208631.tar.bz2

The following is a guide how to install on Centos 5.1:
(more…)

CentOS 5 and the Dell R200

Friday, September 12th, 2008

A few months ago on my personal blog I wrote about the difficulty of installing CentOS on the Dell R200, owing to the SATA DVD drive used in the unit. The R200 is our unit of choice for our ClusterScale “Pegasys” product, so installing Linux distros on this server is a regular occurrence for us. Fortunately, we got hold of a Redhat driver image from Dell and we managed to load it on using a USB key. This is a simple case of typing linux dd at the installation command prompt, but note that you must copy the .img file onto the USB disk, rather than the files within the image itself.

Originally the problem was with CentOS 5.0, but as far as I know it’s still a problem with versions 5.1 and 5.2. Ubuntu installations do not seem to pose the same problem, so presumably they bundle SATA DVD drivers with the distro. I still can’t find this particular driver on the Dell site, so seems like a good idea to host it here too.

The Asus Eeepc 901 is the best computer I have ever owned…

Thursday, September 11th, 2008

I’ve been toying with various flavors of laptops to use on my travels for a while (I’m not really a road warrior but my wife just can’t stop booking holidays).
Most of the time I get by with my trusty Blackberry for emails but sometimes you need a real computer… So I’ve always had to take a clunky laptop, normally dual boot Windows XP / Ubuntu (only need the XP as my current 3G card is somewhat flaky on Linux.).

(more…)

LVS Local node patch for Linux 2.6.25, Centos 5 kernel build how-to

Monday, July 28th, 2008

Standard Kernel builds of LVS (Linux Vitual Server) don’t have the ability to load balance traffic that is from the local node.
For example if you terminated some SSL traffic using stunnel or pound on the load balancer you then wouldn’t be able to forward that traffic to a backend real server through LVS.

First many thanks to Siim Põder for helping to port Carlos Lozano’s patch from 2.4 -> 2.6
In order to run an SSL reverse proxy on the same node that is running LVS
i.e.

External client —> pound:443 –> Local:443 —> IPVS:80 —> RealServer

The patch for Linux Kernel 2.6.25 is here:
http://www.loadbalancer.org/download/patches/ip_vs_locallvs.patch

The following is a guide how to install on Centos 5.1:
(more…)

Ubuntu Hardy Heron 64bit - Problem playing commercial DVDs - Resolved

Wednesday, July 16th, 2008

I’m going on holiday next week to a villa in Spain with the extended family. I’ll take my Blackberry & laptop with Ubuntu and a 3G card because I’m one of those sad people who like to stay in touch with the office… But I’d also like to use the laptop for my 6 year old son to watch DVDs on the plane, now thats all very well but the DVD drains the battery pretty quick and the reliability is pretty awful. So I thought no problem I’ll just rip the DVDs into ogg movie files.

Now I haven’t used any DVDs in Hardy 64 bit (only 32bit which worked fine) but I instantly hit a problem, after being automatically prompted to install the illegal gstreamer library (nice feature that auto prompt) Totem refused to play ball with the DVD:

“An error occurred Could not read from resource”

(more…)

Commercial Linux Applications Are Great - Give me more!

Monday, May 26th, 2008

Open Source applications are even better in many ways, but that is another story ….

We started using an online web site chat service a while back, as it’s an invaluable sales and support tool for us. When we did a quick reckon of the market we quickly came across a problem. It was that old chestnut platform compatibility, we use a mixture of Macs, Linux (mainly Ubuntu) & a few sales guys on Windows.

(more…)