C H A P T E R 23

SLB

SLB provides traffic load distribution functions on the switch. With this feature, traffic entering the switch is distributed to switch attached servers in accordance with a hash traffic distribution policy.

There are two forms of SLB, regular SLB and SLB level 2.

##

23.1 Regular SLB

In regular SLB, load balancing groups consist of server members identified by level 3 protocol (IP) addresses. Server members are next hop targets of a targeted ECMP route. The load balancing group is identified by a VIP which is used to represent a virtual server. For the client, the virtual server is one single highly available server with expandable resources. Load distribution is performed with the routing hash function of the switch.

Load distribution policies are based on the contents of the L3/4 packet header. Failover is supported at the server members level. A failed member within a load balancing group is replaced by another server member that is part of the same group. Health check is performed by the switch with ICMP ping. Regular SLB provides the following benefits:

- Virtualize multiple servers as one highly available and expandable server.

- Perform all functions on existing switch hardware.

- Form multiple load balancing groups to provide flexibility on how server resources are managed.

- Enable SLB with no performance degradation.

##

23.2 SLB L2

Note - SLB L2 is supported in the Sun Blade 6000 Ethernet Switched NEM 24p 10GbE and not the Sun Network 10GbE Switch 72p.

In SLB L2, load balancing groups consist of switch port members. Load distribution is performed with the LAG hash function of the switch. Load distribution policies are based on the contents of the L2/3/4 packet header. Failover is supported at the switch port members level. Depending on the fail-over method chosen, a failed member within a load balancing group is replaced by another switch port or by a group of switch ports within the group.

Connectivity between the switch port and the server is monitored by a health check mechanism. The ACL capability is extended such that a load balancing group can be set as a target when a switch port accepts a packet. SLB L2 provides the following benefits:

- Load balance a group of servers connected to switch ports.

- Provide port level failover with multiple options for high availability configurations.

- Enable bump-in-the-wire load balancing.

##

23.3 Regular SLB Commands

The list of CLI commands for the configuration of SLB is as follows:

- slb

- slb standby

- slb policy

- show slb

- show slb policy

- debug slb

- show slb trace-options

### 23.3.1 `slb`

Forms an SLB group with active members or adds active members to an existing load balancing group. The `no` form of the command removes any members from the existing load balancing group.

    slb virtual-ip-address virtual-ip-address-mask real-ip-address1, real-ip-address2...

    no slb virtual-ip-address virtual-ip-address-mask real-ip-address1,real-ip-address2...

Syntax Description | virtual-ip-address - Virtual IP address prefix of the load balanced server group. virtual-ip-address-mask - Virtual IP address mask of the load balanced server group. real-ip-address1,real-ip-address2 - List of real IP addresses of individual servers within the load balanced server group.
Mode | Global Configuration
Default | None.
Example | SEFOS(config)# slb 10.10.10.0 255.255.255.0 20.5.1.1,20.5.1.2
Notes | Active members denote members that participate in traffic distribution.

#### Related Commands

- show slb - Displays the server load balancing group formed and entries added.

- slb standby - Adds standby members to the load balancing group.

### 23.3.2 `slb standby`

Forms a server load balancing group with standby members or adds standby members to existing load balancing group.

    slb standby virtual-ip-address virtual-ip-address-mask real-ip-address1,real-ip-address2...

Syntax Description | virtual-ip-address - Virtual IP address prefix of the load balanced server group. virtual-ip-address-mask - Virtual IP address mask of the load balanced server group. real-ip-address1,real-ip-address2 - List of real IP addresses of individual servers within the load balanced server group.
Mode | Global Configuration
Default | No SLB group is formed
Example | SEFOS(config)# slb standby 10.10.10.0 255.255.255.0 20.5.1.1,20.5.1.2
Notes | Standby members denote members that participate in traffic distribution only when a failover situation occurs.

#### Related Commands

- show slb - Displays the server load balancing group formed and entries added.

- slb - Adds active members to the load balancing group.

### 23.3.3 `slb policy`

Sets L3/4 load distribution hash policy.

    slb policy [{default | [src-ip] [dest-ip] [proto] [src-port] [dest-port] [tcp] [udp] [sym] [user-prot1 protocol1-val(0-0xff)] [user-port2 protocol2-val(0-0xff)] [rotation rotation-val(0-2)] [diffserv-mask diffserv-mask-val(0-0x3f)] [user-mask user-mask-val(0-0xff)] [flow-label-mask flow-label-mask-val(0-0xfffff)}]

Syntax Description | default - Sets to default policy. src-ip - Source IP address in hashing. dest-ip - Destination IP address in hashing. proto - Protocol field in hashing. src-port - Source port number in hashing. dest-port - Destination port number in hashing. tcp - Enables src-port and dest-port in hashing when packet’s protocol field is TCP. udp - Enables src-port and dest-port in hashing when packet’s protocol field is UDP. sym - Enables symmetry hash. user-prot1 - Enables src-port and dest-port in hashing when packet’s protocol field matches this user defined `protocol1`. protocol1-val - Value of `protocol1`. user-prot2 - Enables src-port and dest-port in hashing when packet’s protocol field matches this user defined `protocol2`. protocol2-val - Value of `protocol2`. diffserv-mask - Masks the IPv4 diffserv field in the hash function. diffserv-mask-val - Value of `diffserv-mask`. user-mask - Masks the ISL tag’s user field in the hash function. user-mask-value - Value of `user-mask`. flow-label-mask - Masks the IPv6 flow label field in the hash function. flow-label-mask-val - Value of `flow-label-mask`.
Mode | Global Configuration
Default | src-ip, dest-ip, proto, src-port, dest-port, tcp, and udp options are set.
Example | SEFOS(config)# slb policy src-ip
Notes | Hash policy is a global setting. Once set, all SLB groups use the same policy.

#### Related Commands

- show slb policy - Displays the server load balancing policy.

### 23.3.4 `show slb`

Displays detailed SLB groups and members information.

    show slb

Mode | Privileged EXEC
Example | SEFOS# show slb SLB Group #1 Virtual IP: 172.1.1.0/24 Server Members: IP Address Vlan MacAddress Port State Comments ================ ==== ================= ==== ========= ============= 20.5.1.1 1 00:14:4f:3e:e0:10 3 ACTIVE 20.5.1.2 1 00:14:4f:3e:e0:11 4 ACTIVE 20.5.1.3 1 00:14:4f:3e:e0:12 5 ACTIVE 20.5.1.4 1 00:14:4f:3e:e0:13 6 FAILED failover to 20.5.1.9 20.5.1.5 1 00:14:4f:3e:e0:14 7 ACTIVE 20.5.1.5 1 00:14:4f:3e:e0:15 8 ACTIVE 20.5.1.7 ---- --:--:--:--:--:-- ---- IDLE 20.5.1.8 1 00:14:4f:3e:e0:17 10 ACTIVE 20.5.1.9`` 1 00:14:4f:3e:e0:18 11 FAILOVER replacing 20.5.1.4 20.5.1.10 1 00:14:4f:3e:e0:19 12 STANDBY (up) 20.5.1.11 ---- --:--:--:--:--:-- ---- STANDBY (down)

### 23.3.5 `show slb policy`

Displays SLB hash policy currently in use.

     show slb policy

Mode | Privileged EXEC
Example | SEFOS# show slb policy L3/4 Hash Fields: src-ip Rotation: 0 DiffservMask: 0x0 UserMask: 0x0 FlowLabelMask: 0x0

### 23.3.6 `debug slb`

Sets the trace-options used for debugging.

    debug slb [{all | default | [all-fail] [group] [node] [route] [task] [policy] [snmp-mibs]}]

Syntax Description | all - Sets all debug options. default - Sets default options. all-fail - Sets display all failure messages. group - Sets display SLB Group debug messages. node - Sets display SLB Server Node debug messages. route - Sets display route debug messages. task - Sets display task debug messages. policy - Sets display hash policy debug messages. snmp-mibs - Sets display SNMP Mibs debug messages.
Mode | Priviledge EXEC
Default | `all-fail` option is set.
Example | SEFOS# debug slb

#### Related Commands

- show slb trace-options - Displays the trace-options in use for debugging.

### 23.3.7 `show slb trace-options`

Displays the trace-options in use for debugging.

     show slb trace-options

Mode | Priviledge EXEC
Example | SEFOS# show slb trace-options Trace Options: all-fail

##

23.4 SLB L2 Commands

Note - SLB L2 is supported in the Sun Blade 6000 Ethernet Switched NEM 24p 10GbE and not the Sun Network 10GbE Switch 72p.

The list of CLI commands for the configuration of SLB L2 is as follows:

- slb l2

- slb l2 standby

- slb l2 failover-method

- slb l2 policy

- slb l2 policy default

- show slb l2

- show slb l2 policy

- show slb l2 debug

### 23.4.1 `slb l2`

Forms an L2 server load balancing group with active members or adds active members to an existing L2 load balancing group. The `no` form of the command removes any members from the existing L2 load balancing group.

    slb l2 group-id interface-type 0/a-b, 0/c, ...

    no slb l2 group-id interface-type 0/a-b, 0/c, ...

Syntax Description | group-id - User specified group ID. interface-type - Interface type of the switch port member. 0/a-b, 0/c, ... - Switch port members to be added.
Mode | Global Configuration
Default | No SLB L2 group is formed.
Example | SEFOS(config)# slb l2 1 extreme-ethernet 0/15-18,0/20

#### Related Commands

- show slb l2 - Displays L2 server load balancing groups and members.

### 23.4.2 `slb l2 standby`

Forms an L2 server load balancing group with standby members, or adds standby members to an existing L2 load balancing group.

    slb l2 standby group-id interface-type 0/a-b, 0/c, ...

Syntax Description | group-id - User specified group ID. interface-type - Interface type of the switch port member. 0/a-b, 0/c, ... - Switch port members to be added.
Mode | Global Configuration
Default | No SLB L2 Group is formed.
Example | SEFOS(config)# slb l2 standby 1 extreme-ethernet 0/21

#### Related Commands

- show slb l2 - Displays L2 server load balancing groups and members.

### 23.4.3 `slb l2 failover-method`

Sets the failover method used when a failover event occurs.

    slb l2 failover-method group-id {standby | all-standby | all-ports | prefer-standby}

Syntax Description | group-id - Group ID of the SLB L2 group. standby - Traffic is redirected to an available standby port (NPlus1). all-standby - Traffic destined to a failed port is hashed across all standby ports. all-ports - Traffic destined to a failed port is hashed to all ports (active and standby ports). prefer-standby - Traffic destined to a failed port is first redirected directly to a standby port if it has not already been used. Once all standby ports are in use, traffic is hashed across all ports.
Mode | Global Configuration
Default | all-ports
Example | SEFOS(config)# slb l2 failover-method 1 standby

### 23.4.4 `slb l2 policy`

Sets L2/3/4 load distribution hash policy.

    slb l2 policy [src-mac] [dest-mac] [type] [vlan-id] [vlan-pri] [l2-sym] [src-ip] [dest-ip] [proto] [src-port] [dest-port] [tcp] [udp] [sym] [user-prot1 protocol1-val(0-0xff)] [user-prot2 protocol2-val(0-0xff)] [rotation rotation-val(0-2)] [diffserv-mask diffserv-mask-val(0-0x3f)] [user-mask user-mask-val(0-0xff] [flow-label-mask flow-label-mask-val(0-0xfffff)]

Syntax Description | src-mac - Source MAC address in hashing. dest-mac - Destination MAC address in hashing. type - L2 type field in hashing. vlan-id - VLAN ID field in hashing. vlan-pri - VLAN PRI field in hashing. l2-sym - Source and destination MAC ID in symmetry form. src-ip - Source IP address in hashing. dest-ip - Destination IP address in hashing. proto - Protocol field in hashing. src-port - Source port number in hashing. dest-port - Destination port number in hashing. tcp - Enables src-port and dest-port in hashing when packet’s protocol field is TCP. udp - Enables src-port and dest-port in hashing when packet’s protocol field is UDP. sym - Enable symmetry hash. user-prot1 - Enables src-port and dest-port in hashing when packet’s protocol field matches this user defined protocol1. protocol1-val - Value of protocol1. user-prot2 - Enables src-port and dest-port in hashing when packet’s protocol field matches this user defined protocol2. protocol2-val - Value of protocol2. diffserv-mask - Masks the IPv4 diffserv field in the hash function. diffserv-mask-val - Value of diffserv-mask. user-mask - Masks the ISL tag’s user field in the hash function. user-mask-value - Value of user-mask. flow-label-mask - Masks the IPv6 flow label field in the hash function. flow-label-mask-val - Value of flow-label-mask.
Mode | Global Configuration
Default | src-ip, dest-ip, proto, src-port, dest-port, tcp, and udp options are set.
Example | SEFOS(config)# slb policy src-ip
Notes | Hash policy is a global setting. Once set, all SLB groups use the same policy.

#### Related Commands

- show slb l2 policy - Displays the L2 server load balancing policy.

### 23.4.5 `slb l2 policy default`

Sets default L2/3/4 load distribution hash policy.

    slb l2 policy default

Mode | Global Configuration
Example | SEFOS(config)# slb l2 policy default

### 23.4.6 `show slb l2`

Shows the L2 load balancing entries added and the hash algorithm used.

    show slb l2

Mode | Privileged EXEC
Example | SEFOS# show slb l2 L2 SLB Group #1: Failover Method: Failover to All Ports Port Members: Port State Comments ==== ===== ================== 1 ACTIVE 2 ACTIVE 3 FAILED failover to all ports 4 IDLE 5 ACTIVE 6 STANDBY

### 23.4.7 `show slb l2 policy`

Displays SLB L2 Hash Policy currently in use.

    show slb l2 policy

Mode | Privileged EXEC
Example | SEFOS# show slb l2 policy SEFOS# show slb l2 policy L2 Hash Fields: src-mac vlan-id L3/4 Hash Fields: src-ip Rotation: 0 DiffservMask: 0x0 UserMask: 0x0 FlowLabelMask: 0x0

### 23.4.8 `show slb l2 debug`

Displays the SLB L2 groups and members along with debugging information.

    show slb l2 debug

Mode | Privileged EXEC
Example | SEFOS# show slb l2 debug L2 SLB Group #1: Failover Method: Failover to All Ports Port Members: Port State PortMode STP Comments ==== ===== ======== ===== ========== 1 ACTIVE Active Forward 2 ACTIVE Active Forward 3 FAILED Failover Forward failover to all ports 4 IDLE Unknown Block 5 ACTIVE Active Forward 6 STANDBY Standby Forward

Copyright © 2012, Oracle and/or its affiliates. All rights reserved.