Load balancing on ldapbind port 3060

have you tried snat automap (under virtual server setting)?

> I've set up a basic VIP (ldapbind.vip) to listen on TCP port 3060 and

 

> load balance across two nodes (host953 & host954) using cookie persistence.

 

 

LDAP is not HTTP, so cookie persistence will not work! Do you really need persistence here?

 

 

> [oraidm@host954] $ ldapbind -h ldapbind.vip -p 3060 -D "cn=orcladmin"

 

> sgslufread: Hard error on read, OS error = 131

 

> ldap_bind: Can't contact LDAP server

 

1.) Does ldapbind.vip resolve to the correct IP on the LB? Maybe it's a different VS.

 

 

2.) Apparently you can access the hosts directly from your client, so you will need SNAT for the VS, otherwise you will get asymetric routed packets.

 

 

3.) As you mentioned cookie persistence, I assume you added a HTTP profile to the VS, otherwise you would get an error message when you active cookie persistence. Please remove the HTTP profile. LDAP is not HTTP. Just define a plain TCP based virtual server, possibly FastL4 for better performance, if you won't need an iRule.

 

 

4.) if nothing of the above helps: Can you post the VS configuration ('b virtual VS_NAME list')?

 

 

Hope that helps.

 

 

Regards

 

Kurt Knochner

 

 

LDAP is not HTTP, so cookie persistence will not work!good catch!

I think the http profile causes the problem, as the LB will then try to talk HTTP on port 3060 to the backend server. The LB then sends a TCP RESET to the client.

 

 

According to the link below, "OS error = 131" means ECONNRESET.

 

 

https://forums.oracle.com/forums/th...ID=2546156

 

 

Regards

 

Kurt Knochner