Forum Discussion

sachin_80710's avatar
sachin_80710
Icon for Nimbostratus rankNimbostratus
Dec 30, 2014

Oneconnect for LDAP Virtual server

Hi all, We have virtual server to load balance LDAP server pool. I need suggestion, Oneconnect profile can be applied to our LDAP virtual server ? or Oneconnect is only for http virtual servers?   ...
application delivery
deployment
LTM
sachin_80710's avatar
sachin_80710
Icon for Nimbostratus rankNimbostratus
Jan 02, 2015

Happy New Year to all,

 

Thanks to all for valuable inputs. So oneconnect is not going to help in reusing server side connection in our setup(LDAP). Is there any other way to proactively open few server-side connection and keep them open?

 

Thanks, Sachin

 

  • StephanManthey's avatar
    StephanManthey
    Icon for Nacreous rankNacreous
    Jan 02, 2015
    Thanks! :) From my perspective the answer is negative. To distribute LDAP queries from same client (single clientside LDAP bind) to multiple LDAP servers a OneConnect-like behaviour would be required. TCP connection setup is probably (at least I guess) not the most time/resource consuming part in the serverside communication. Establishing the serverside LDAP bind and answering the received query takes probably much more time and CPU cycles. So proactive opening of TCP connections may not speed up the whole communication significantly. iRules are available on DevCentral to cache and replay a serverside LDAP bind (required for transparent failover between pool members). I saw as well an iRule to completely intercept LDAP traffic and to cache responses on the F5. As mentioned in my previous post, F5 Professional Services folks may help to implement such kind of solution.