Administering ILB Rules

You can use ilbadm to create, delete, and list the load-balancing rules. For definition of a load-balancing rule and the parameters needed to create a rule, see ILB Terminology.

How to Create a Rule

1. Create a server group that includes the appropriate back-end servers.

   # ilbadm create-servergroup -s server=60.0.0.10:6000-6009,60.0.0.11:7000-7009 sg1

2. If you want to associate server health checks with a rule, create a health check object.

   # ilbadm create-healthcheck -h hc-test=tcp,hc-timeout=2,hc-count=3,hc-interval=10 hc1

3. Identify the VIP, port, and optional protocol that are to be associated with the rule.
4. Select the operation you want to use (DSR, full-NAT or half-NAT). If NAT is selected, you must specify the IP address range that is to be used as the proxy-src address.
5. Select the load-balancing algorithm that is to be used.
6. Select other optional features (see the ilbadm(1M) man page for details).
7. Select a rule name.
8. Create and enable the rule.

   # ilbadm create-rule -e -i vip=81.0.0.10,port=5000-5009,protocol=tcp\ -m lbalg=rr,type=NAT,proxy-src=60.0.0.101-60.0.0.104,persist=/24 -h hc-name=hc1 -o servergroup=sg1 rule1

Example 23-6 Creating a Full-NAT Rule With a Health Check Session Persistence

This example creates a health check called hc1, and a server group called sg1 (consisting of two servers, each with a range of ports). The last command creates and enables a rule called rule1 of full-NAT mode and associates the rule to the server group and the health check. Note that the creation of the server group and health check must precede the creation of the rule.

ilbadm create-healthcheck -h hc-test=tcp,hc-timeout=2,hc-count=3,hc-interval=10 hc1
ilbadm create-servergroup -s server=60.0.0.10:6000-6009,60.0.0.11:7000-7009 sg1
ilbadm create-rule -e -i vip=81.0.0.10,port=5000-5009,protocol=tcp \ -m lbalg=rr,type=NAT,proxy-src=60.0.0.101-60.0.0.104,persist=/24 -h hc-name=hc1 -o servergroup=sg1 rule1

When creating a NAT/half NAT rule, it is recommended to specify the value for connection-drain timeout. The default value of conn-drain timeout is 0, meaning it will keep waiting until a connection is gracefully shut down.

Deleting a Rule

To delete a rule, use the delete-rule subcommand. If you want to remove all rules, use the -a option. The following example deletes the rule called rule1:

# ilbadm delete-rule rule1

Listing Rules

To list the configuration details of a rule, use the list-rule subcommand. If no rule name is specified, information is provided for all rules.

# ilbadm show-rule