Configuring Direct Server Return (DSR)

When to use DSR

• When response time matters

• When no intelligence is required

• When the output capacity of the load balancer might be a bottleneck

How DSR works

DSR is also known as the "Gateway" mode.

In layer 4 gateway mode, the ALOHA load balancer sees only the traffic going from the client to the server. The servers answer directly to the client through its default gateway.

• The client reaches the Virtual IP address configured on the load balancer.

• The ALOHA load balancer chooses a server based on its configuration, and changes the destination MAC address of the frame before it forwards it to the server.

• The server receives the packets corresponding to the request.

• The server answers directly back to the client, bypassing the ALOHA load balancer.

The backends must have the service IP configured on a loopback in order to accept the requests.

Configure DSR on ALOHA

1. In ALOHA's user interface, browse to the "LB Layer 4" tab.

2. Copy and paste the following lines in the "Configuration" box:

   director exchange 10.0.0.9:443 TCP
       balance roundrobin                               #alctl: load balancing algorithm
       mode gateway                                     #alctl: forwarding mode
       check interval 10 timeout 2                      #alctl: check parameters
       option tcpcheck                                  #alctl: adv check parameters
       server exchange1 10.0.0.13:443 weight 10 check   #alctl: server exchange1
       server exchange2 10.0.0.14:443 weight 10 check   #alctl: server exchange2

Configure DSR on Linux

This section describes the server side configuration to make it compatible with an ALOHA load balancer configured in Layer 4 DSR mode.

1. Create a loopback interface (i.e. lo:1) with the Virtual IP address and a netmask value setup to 255.255.255.255 (/32).

   Note

   Remember to make it resilient at startup. This configuration depends on the Linux distribution you are using.

2. Set up the two sysctls below:

   • arp_ignore to 1

   • arp_announce to 2

3. To apply the changes directly, run the commands below:

   $ sudo sysctl -w net.ipv4.conf.all.arp_ignore=1
   $ sudo sysctl -w net.ipv4.conf.all.arp_announce=2

4. To make these changes resilient after reboot, edit your /etc/sysctls.conf file to add the two lines below:

   net.ipv4.conf.all.arp_ignore=1
   net.ipv4.conf.all.arp_announce=2