Page MenuHomeVyOS Platform
Create Task
Maniphest T3116

Support back-end L4 level load balancing
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

Let us consider whether it is possible to configure a load balancing scheme similar to LVS into the Vyos router

At least the following modes are supported:

  • LVS-DR
  • LVS-TUN
  • LVS-NAT

Details

Difficulty level
Hard (possibly days)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedFEATURE REQUESTjack9603301T3116 Support back-end L4 level load balancing
 InvalidFEATURE REQUESTNoneT3209 Load balancing rules in firewall

Event Timeline

jack9603301 triaged this task as Wishlist priority.Dec 5 2020, 12:44 PM
jack9603301 created this task.
jack9603301 edited projects, added VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.Dec 10 2020, 6:01 PM
pasik added a subscriber: pasik.Dec 11 2020, 2:06 PM
jack9603301 updated the task description. (Show Details)Dec 17 2020, 6:57 AM
jack9603301 updated the task description. (Show Details)
jack9603301 updated the task description. (Show Details)
jack9603301 changed Difficulty level from Unknown (require assessment) to Hard (possibly days).Jan 14 2021, 11:12 AM
jack9603301 changed the task status from Open to Confirmed.Jan 14 2021, 11:21 AM
jack9603301 claimed this task.
jack9603301 added a project: VyOS 1.3 Equuleus.Jan 21 2021, 3:08 PM
jack9603301 updated the task description. (Show Details)Jan 27 2021, 8:14 AM
jack9603301 renamed this task from Support L4 level load balancing to Support back-end L4 level load balancing.Jan 27 2021, 9:09 AM
jack9603301 changed the task status from Confirmed to In progress.Jan 28 2021, 1:03 PM
jack9603301 moved this task from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
jack9603301 added a comment.Jan 28 2021, 1:12 PM

PR: https://github.com/vyos/vyos-1x/pull/708

Development is continuing, so this PR is a draft

This draft currently defines a basic CLI

jack9603301 raised the priority of this task from Wishlist to Normal.Jan 28 2021, 2:00 PM
jack9603301 changed Difficulty level from Hard (possibly days) to Normal (likely a few hours).
jack9603301 changed the task status from In progress to Confirmed.Jan 30 2021, 12:43 PM
jack9603301 lowered the priority of this task from Normal to Wishlist.
jack9603301 moved this task from In Progress to Need Triage on the VyOS 1.3 Equuleus board.
jack9603301 added a subscriber: dmbaturin.Jan 31 2021, 10:46 AM

@dmbaturin Hi, I would like to discuss with you the possibility of introducing load-balancing components based on direct-routing mode in VYOS. VYOS already has binary components that implement LVS

jack9603301 updated the task description. (Show Details)Feb 1 2021, 5:38 PM
jack9603301 removed a project: VyOS 1.3 Equuleus.Feb 5 2021, 4:33 AM
dmbaturin added a subscriber: c-po.Feb 6 2021, 4:07 AM

The preliminary idea is to use load-balancing inbound syntax for balancing load between multiple hosts inside the network (i.e. LVS) and load-balancing outbound for balancing connections between multiple WAN interfaces.

@c-po should review the PR draft.

jack9603301 changed the task status from Confirmed to In progress.Feb 22 2021, 9:40 AM
jack9603301 raised the priority of this task from Wishlist to Normal.
jack9603301 moved this task from Need Triage to In Progress on the VyOS 1.4 Sagitta board.

Start implementing this draft

jack9603301 added a comment.Feb 24 2021, 1:24 PM

@dmbaturin @c-po Hi, I have basically completed the T3116 draft implementation, test, I only inspect the ipvsadm rules, seems to work properly, the draft only for ipvsadm, to set up some rules, now, you and @c-po can achieve the preliminary examination of the draft (about smoke tests, I currently only normal execution of the command line configuration program testing, has not yet been configured efficacy)

jack9603301 added a comment.Feb 24 2021, 1:26 PM

PR: https://github.com/vyos/vyos-1x/pull/708

Viacheslav added a subtask: T3209: Load balancing rules in firewall.Apr 29 2021, 8:37 AM
jack9603301 changed Difficulty level from Normal (likely a few hours) to Hard (possibly days).Jun 3 2021, 4:10 PM
jack9603301 updated the task description. (Show Details)Aug 1 2022, 3:35 PM
jack9603301 set Issue type to Unspecified (please specify).
jack9603301 updated the task description. (Show Details)
jack9603301 added a comment.Apr 6 2023, 10:09 AM

@c-po How is the review and discussion on this feature going?

jack9603301 mentioned this in T5341: Improve CLI for high-availability virtual-server to work with multiple ports.Jul 26 2023, 4:49 PM
dmbaturin closed subtask T3209: Load balancing rules in firewall as Invalid.Jan 9 2024, 8:29 PM
Viacheslav closed this task as Resolved.Jan 10 2024, 9:37 PM
Viacheslav added a subscriber: Viacheslav.

Done

vyos@r4# set high-availability virtual-server serv1 forward-method 
Possible completions:
   direct               Direct routing
   nat                  NAT (default)
   tunnel               Tunneling