JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
Managing Oracle Solaris 11.1 Network Performance     Oracle Solaris 11.1 Information Library
search filter icon
search icon

Document Information

Preface

1.  Introduction to Network Performance Management

2.  Using Link Aggregations

3.  Working With VLANs

4.  Administering Bridged Networks (Tasks)

5.  Introduction to IPMP

6.  Administering IPMP (Tasks)

7.  Exchanging Network Connectivity Information With LLDP

8.  Working With Data Center Bridging Features in Oracle Solaris

9.  Edge Virtual Bridging in Oracle Solaris

10.  Integrated Load Balancer (Overview)

11.  Configuring Integrated Load Balancer

12.  Managing Integrated Load Balancer

Administering ILB Server Groups

How to Create an ILB Server Group

How to Delete an ILB Server Group

Administering Back-End Servers in ILB

How to Add a Back-End Server to an ILB Server Group

How to Remove a Back-End Server From an ILB Server Group

How to Re-enable or Disable a Back-End Server in an ILB Server Group

Administering Health Checks in ILB

Creating a Health Check

User-Supplied Test Details

Displaying Health Checks

Displaying Health Check Results

Deleting a Health Check

Administering ILB Rules

Listing ILB Rules

How to Create an ILB Rule

Deleting an ILB Rule

Displaying ILB Statistics

Obtaining Statistical Information

Displaying the NAT Connection Table

Displaying the Session Persistence Mapping Table

13.  Virtual Router Redundancy Protocol (Overview)

A.  Link Aggregation Types: Feature Comparison

B.  Link Aggregations and IPMP: Feature Comparison

Index

Administering ILB Rules

In ILB, a virtual service is represented by a load-balancing rule and is defined by the following parameters.

This section describes how you can use the ilbadm command to create, delete, and list the load-balancing rules.

Listing ILB Rules

To list the configuration details of a rule, use the ilbadm show-rule subcommand. If no rule name is specified, information is provided for all rules.

# ilbadm show-rule

The following is the sample command output.

RULENAME
STATUS
LBALG
TYPE
PROTOCOL
VIP
PORT
rule-http
E
hash-ip-port
HALF-NAT
TCP
10.0.0.1
80
rule-dns
D
hash-ip
DSR
UDP
10.0.0.1
53
rule-abc
D
roundrobin
NAT
TCP
2003::1
1024
rule-xyz
E
hash-ip-vip
NAT
TCP
2003::1
2048-2050

How to Create an ILB Rule

  1. Create a server group that includes the appropriate back-end servers.
    # ilbadm create-servergroup -s server=server1:port-range1,server2:port-range2 sg1
  2. If you want to associate server health checks with a rule, create a health check.
    # ilbadm create-healthcheck -h hc-test=protocol, \
    hc-timeout=value1,hc-count=value2 \
    ,hc-interval=value3 hc1
  3. Identify the VIP, port, and optional protocol that are to be associated with the rule.

    These are specified using the -i option.

  4. Select the operation you want to use (DSR, half-NAT or full-NAT).

    If NAT is selected, you must specify the IP address range that is to be used as the proxy-src address. The range is limited to 10 IP addresses for full-NAT topology.

  5. Select the load-balancing algorithm that is to be used.

    The parameters in step 4 and step 5 can be specified in the -m option. For more information, see ILB Algorithms.

  6. Select other optional features.

    For more information, see the ilbadm(1M) man page for details.

  7. Select a rule name.
  8. Create and enable the rule.

    For more information about each option, see the ilbadm(1M) man page.

    # ilbadm create-rule -e -i vip=ipaddr,port=port,protocol=protocol \
    -m lbalg=lb-algorithm,type=topology-type,proxy-src=ipaddr1-ipaddr2, \
    pmask=value4 -h hc-name=hc1 \
    -o servergroup=sg1  rule1

    The following example shows the steps to create a full-NAT rule with health check.

Example 12-6 Creating a Full-NAT Rule With Health Check Session Persistence

This example creates a health check called hc1 and a server group called sg1. The server group consists of two servers, each with a range of ports. The last command creates and enables a rule called rule1 and associates the rule to the server group and the health check. This rule implements the full-NAT mode of operation. Note that the creation of the server group and health check must precede the creation of the rule.

# ilbadm create-healthcheck -h hc-test=tcp,hc-timeout=2, \
hc-count=3,hc-interval=10 hc1
# ilbadm create-servergroup -s server=60.0.0.10:6000-6009,60.0.0.11:7000-7009 sg1
# ilbadm create-rule -e -i vip=81.0.0.10,port=5000-5009, \
protocol=tcp -m lbalg=rr,type=NAT, \
proxy-src=60.0.0.101-60.0.0.104,persist=24 \
-h hc-name=hc1 -o servergroup=sg1 rule1

When creating a half-NAT or a full-NAT rule, specify the value for the connection-drain timeout. The default value of conn-drain timeout is 0, meaning it will keep waiting until a connection is gracefully shut down.

Deleting an ILB Rule

To delete a rule, use the ilbadm delete-rule subcommand. To delete all rules, use the -a option. The following example deletes the rule called rule1:

# ilbadm delete-rule rule1