Go to main content

Configuring an Oracle® Solaris 11.3 System as a Router or a Load Balancer

Exit Print View

Updated: December 2018
 
 

Configuring ILB by Using the Command-Line Interface

The ILB CLI is located in the /usr/sbin/ilbadm directory. The CLI includes subcommands to configure load-balancing rules, server groups, and health checks. It also includes subcommands to display statistics as well as view configuration details. You must set up user authorization for ILB configuration subcommands except for the view subcommands, such as ilbadm show-rule, ilbadm show-server, and ilbadm show-healthcheck. You must have the solaris.network.ilb.config RBAC authorization to execute the ILB configuration subcommands.

  • To find out how to assign the authorization to an existing user, see Chapter 3, Assigning Rights in Oracle Solaris in Securing Users and Processes in Oracle Solaris 11.3.

  • You can also provide the authorization when creating a new user account on the system.

    The following example creates a user ilbadm with group ID 10, user ID 1210, and with the authorization to administer ILB in the system.

    # useradd -g 10 -u 1210 -A solaris.network.ilb.config ilbadmin

    The useradd command adds a new user to the /etc/passwd, /etc/shadow, and /etc/user_attr files. The -A option assigns the authorization to the user.

The subcommands can be divided into two categories:

  • Configuration subcommands – These subcommands enable you to perform the following tasks:

    • Create and delete load-balancing rules

    • Enable and disable load-balancing rules

    • Create and delete server groups

    • Add and remove servers from a server group

    • Enable and disable back-end servers

    • Create and delete server health checks for a server group within a load-balancing rule


    Note -  You must have privileges to administer the configuration subcommands. To create the appropriate role and assign the role to a user, see Creating a Role in Securing Users and Processes in Oracle Solaris 11.3.
  • View subcommands – These subcommands enable you to perform the following tasks:

    • View configured load-balancing rules, server groups, and health checks

    • View packet forwarding statistics

    • View the NAT connection table

    • View health check results

    • View the session persistence mapping table


    Note -  You do not need privileges to administer the view subcommands.

For more information about the ilbadm subcommands, refer to the ilbadm(1M) man page.