We have extensive experience in the WiFi roaming arena, and we are actively involved in vendor forums. Proxying is a key part of most RADIUS infrastructures. We foster relationships with numerous companies that provide roaming and proxying RADIUS help.
Our product includes the following RADIUS server proxy capabilities:
- Multiple realms, with
- Realm determination on prefix
- Realm determination on suffix
- Realm determination on regular expressions
- No limit on the number of home servers or realms
- All internal data structures use hash marks or binary trees for scalability.
- Home servers can be placed in different kinds of pools
- Failover: Use the first one that is responsive
- Load balancing: Divide the load evenly among the home servers
- Keyed hash marks: Divide the load by hash, e.g., on username
- Increased RADIUS server proxy stability over traditional
methods, via:
- Fine-grained control over when a home server is marked “dead”
- Multiple methods for determining that a home server has become responsive
- Requests can failover from one home server to another
- Policies can be set for:
- When a packet is first proxied
- When a response is received
- When a packet fails to obtain a response
- When all home servers are unresponsive
- Custom proxying RADIUS server determination and algorithms
Our product has been tested with 500,000 realms and home servers. These tests concluded that although memory usage was significantly higher with 500,000 realms than with a small number of realms, the corresponding maximum proxying performance decreased by only a few percent.
In Comparison
Our product is the most flexible, feature-rich, cost-effective, and stable RADIUS server proxy solution available. Other solutions come with a higher price and with less efficiency.
Please contact our sales team to learn more about how our FreeRADIUS solutions can solve your current proxy problems.
Need more help?
InkBridge Networks has been at the forefront of network security for over two decades, tackling complex challenges across various protocols and infrastructures. Our team of seasoned experts has encountered and solved nearly every conceivable network security issue. If you're looking for insights from the architects behind some of the internet's most foundational authentication systems, you can request a quote for network security solutions here.
Related Articles
Client Case Study: RADIUS Proxy
A case study on how Network RADIUS were able to assist a client to increase the stability of their RADIUS proxy system. We were able to reuse common configuration, maintain existing capabilities and make proxying more robust. A faster failover and more reliable system helped lower ongoing costs and increase revenue.
Email addresses are primary user identifiers?
There is a lot of advice out there that email addresses are not identifiers. Even Internet2 has a document explaining why email is not an appropriate user identifier. What does this mean for RADIUS, especially since RFC 7542 allows using email addresses as identifiers? Speaking as the author of RFC 7542, I think I can help you.