1 2 Previous Next 18 Replies Latest reply on Nov 24, 2016 4:19 AM by pramod2016

    Load Balancing Issue.

    anas 14

      Hello All,

       

      We have a cluster of two MWG appliances in proxy HA mode active/active ,I think there is a  problem in balancing the load between the two nodes , there is a huge difference in the number of requests/second between them, please have a look on the attached snapshot.

      snapshot for Macafi - Copy.png

      the second appliance with 299 R/S is the director.

       

      is it a normal behavior?! if not how to minimize the difference in the number of R/S between the two nodes.

       

      Thanks in advance.

      Anas

        • 1. Re: Load Balancing Issue.
          M Bagheryan M

          check your setting as it is written here:

          Best Practices: Proxy HA

          This is excellent guide ever!

           

          Enjoy

          • 2. Re: Load Balancing Issue.
            anas 14

            Thanks, actually I have configured the settings same as the Best Practices: Proxy HA  guide, and it was working fine with a close number of requests per second, then the mentioned difference appeared.

            • 3. Re: Load Balancing Issue.
              asabban

              Hello,

               

              the load sharing algorithm is source IP based. Can you ensure that MWG sees all client IP addresses correctly, e.g. there is no device between clients and MWG which performs NAT or any downstream proxy a larger group of users use?

               

              Best,

              Andre

              • 4. Re: Load Balancing Issue.
                M Bagheryan M

                It is Normal.  Load Balancing is not meaning by share the traffic 50/50

                 

                If you want to make 50/50 then you have to configure it from your DNS not MWG but MWG is doing load balancing as sending the traffic to second appliance after passing some specified percentage.

                 

                As far as I know your Picture is shown that everything is working perfect.

                 

                There is nothing to worry about it.

                 

                Enjoy.

                • 5. Re: Load Balancing Issue.
                  asabban

                  Hello,

                   

                  not exactly 50/50 is correct, but MWG does some sort of round robin based on the IP address of the incoming connection and tries to equally share IP addresses across the nodes. If you have 50 clients and MWG sees all of these IP addresses it tries to put 25 of the IP addresses to scanning node 1 and 25 to scanning node 2. It depends a little on how quickly new IP addresses come in so the distribution will not be 100%ly equal, but you should see some traffic on both nodes.

                   

                  Now it could happen that there is one client IP address which creates much more requests/second than others. Now you will see that - although the clients are almost equally shared across all nodes - one node does much more requests per second than the other one. The load sharing does not care for requests/second but only for connections.

                   

                  That's why it needs to be ensured that there is no single source IP address which creates a big amount of traffic, such as devices hidden behind a NAT IP or downstream proxy. If you really see that the clients are shared very unequally there might be an issue we should look into.

                   

                  Best,

                  Andre

                  • 6. Re: Load Balancing Issue.
                    M Bagheryan M

                    Thanks for  the note advised.

                    • 7. Re: Load Balancing Issue.
                      anas 14

                      thank you M.BM. OK it is not meaning by share the traffic 50%-50%, but of course it is not meaning  95%-5% too

                       

                      assaban thank you for your answer it is very making sense, I will check the point you mentioned and get back.

                       

                      Many Thanks

                       

                      Anas.

                      • 8. Re: Load Balancing Issue.
                        anas 14

                        Hello Asabban.

                         

                        I think there is a client creates a big amount of traffic as you mentioned, but how could i know that client?? does MWR help in this drill ??

                        • 9. Re: Load Balancing Issue.
                          asabban

                          I think looking into the access.log could help. If there is one client creating such amount of requests per second you should see some obvious log file lines with one IP address showing again and again.

                          1 2 Previous Next