Load balancing SMPP authentication with MRF and no iRules. Can it be done?
Hi DevCentral, I will be honest, I do not completely understand how SMPP works, and the full requirements, but of all the configurations required this is the one that's throwing me for a loop. The scenario is as follows; When an external client initiates a connection to the VS, they are required to authenticate to two servers located in two differing subnets. The LTMs must traverse other gateways to reach these subnets. The requirements are to allow the connecting client to authenticate to both servers and any subsequent messages are load balanced to either of the servers, and if possible persist to only one based on the client/source. If the server fails, the pool will reselect and direct the connection to the available member. If the authenticated session fails, or the client closes the connection, they will re-authenticate to both servers and then load balancing can take place as before. I have looked at an iRule example by Dev member NAT, and trying to understand it at the moment. Some of it I get but the majority still escapes me, and I'm currently watching a TCL crash course to try and understand further. Referencing this post, from Dev user Sam, showing the SMPP message flow, which seems similar to Diameter, and from this I have been looking at MRF to possibly circumvent the iRules, limiting the complexity for future modifications. I have not begun configuring the SMPP services as yet, focusing on other configurations required prior to undertaking this one which seems mentally as a challenge. The HA pair LTMs are currently running version 12.0.0 1.0.0.628. My questions are; Is it possible to undertake this task without using iRules? and if so, any suggestions/tips for the configuration? Based on the message flow, is MRF viable for this solution? If iRules are required for the requirements, can the iRule example (from above) be used to satisfy this requirement? I would appreciate any assistance regarding the above, and also, feel free to ask for any information which can hopefully aid in a resolution. Best regards, T33
LB for SMPP / SMSCs in NFV environment
Hi all, We are trying to use the LMT F5 (installed on Openstack) to be SMSC Getaway (Short Message Service Center – Getaway) for external messages Our installation is based on minimum 2 SMSCs, and Maximum 8 SMSCs So, if an external application will connect to the SMSCs, the F5 will get the connection request (bind) and will try to connect to all active SMSCs with the same bind connection For messages running on top the active connection (submit_sm), the F5 will do a round robin between all the active SMSCs. Connection from Client & message from SMSC: 1:: Client1 ---(bind)---> F5 1-1:: F5 ----(bind)----> SMSC1 1-2:: F5 ----(bind)----> SMSC2.... (max of 8 SMSCs) 1-1':: SMSC1 -----(bind_resp1)----->F5 1-2':: SMSC2 -----(bind_resp2)----->F5.... (max of 8 SMSCs) 2:: If (bind_resp1 = OK) or (bind_resp2 = OK) or (max 8 SMSCs); respond back to Client1 with OK 2:: Else; respond back with NOK 3:: SMSC1 ----(deliver_sm1)---->F5 [store sequence, use internal sequence] 3-1:: F5 ----(deliver_sm1)---->Client1 4:: SMSC2 ----(deliver_sm2)---->F5 [store sequence, use internal sequence] 4-1:: F5 ----(deliver_sm2)---->Client1 4-1':: Client1 ----(deliver_sm_resp2)---->F5 3-1':: Client1 ----(deliver_sm_resp1)---->F5 4-1'':: F5 ----(deliver_sm_resp2)---->SMSC2 [use original sequence] 3-1'':: F5 ----(deliver_sm_resp1)---->SMSC1 [use original sequence] Connection from Client & message from Client: 1:: Client1 ---(bind)---> F5 1-1:: F5 ----(bind)----> SMSC1 1-2:: F5 ----(bind)----> SMSC2.... (max of 8 SMSCs) 1-1':: SMSC1 -----(bind_resp1)----->F5 1-2':: SMSC2 -----(bind_resp2)----->F5.... (max of 8 SMSCs) 2:: If (bind_resp1 = OK) or (bind_resp2 = OK); respond back to Client1 with OK 2:: Else; respond back with NOK 3:: Client1 ----(deliver_sm1)---->F5 [store sequence, use internal sequence] 4-1:: F5 ----(deliver_sm1)---->SMSC using Round Robin [store sequence, use internal sequence] 4-1':: SMSC ----(deliver_sm_resp1)---->F5 [use original sequence] 3-1':: F5----(deliver_sm_resp1)---->Client1 [use original sequence]
ADDING A SYSTEM ID TO AN SMPP VIP
I need help on adding a system id to an SMPP VIP for authentication. My topology involves an ESME, two smpp firewalls which communicate via separate F5 vip's To the SMSC. So, my topology looks like this. ESME>>>1ST F5 VIP 1ST F5 VIP forwards t0 1st smpp firewalls. 1st smpp firewalls are configured to forward to second f5 VIP. 1ST SMPP FW>>>>>2ND F5 VIP 2nd F5 VIP load balances to 2nd smpp firewalls. 2nd f5 vip>>>2nd smpp firewalls. 2nd smpp firewalls are configured to forward to third f5 vip. 2nd smpp firewalls >>>>> third f5 vip. third f5 vip load balances to SMSC. 3rd f5 vip>>>SMSC. i used the irule based on this beautful irule on this thread. https://devcentral.f5.com/questions/balancing-smpp-traffic-based-on-recipient-address. The irule used is listed in comment. The bind tranceiver message hits the 1st smpp firewall, and fails on hitting the second F5 VIP, as the second F5 VIP doesn't have the SYSTEM ID parameter configured. How do i configure the system ID on the 2nd and third F5 VIP's.ADDING A SYSTEM ID TO AN SMPP VIP
I need help on adding a system id to an SMPP VIP for authentication. My topology involves an ESME, two smpp firewalls which communicate via separate F5 vip's To the SMSC. So, my topology looks like this. ESME>>>1ST F5 VIP 1ST F5 VIP forwards t0 1st smpp firewalls. 1st smpp firewalls are configured to forward to second f5 VIP. 1ST SMPP FW>>>>>2ND F5 VIP 2nd F5 VIP load balances to 2nd smpp firewalls. 2nd f5 vip>>>2nd smpp firewalls. 2nd smpp firewalls are configured to forward to third f5 vip. 2nd smpp firewalls >>>>> third f5 vip. third f5 vip load balances to SMSC. 3rd f5 vip>>>SMSC. i used the irule based on this beautful irule on this thread. https://devcentral.f5.com/questions/balancing-smpp-traffic-based-on-recipient-address. The irule used is listed in comment. The bind tranceiver message hits the 1st smpp firewall, and fails on hitting the second F5 VIP, as the second F5 VIP doesn't have the SYSTEM ID parameter configured. How do i configure the system ID on the 2nd and third F5 VIP's.