summaryrefslogtreecommitdiffstats
path: root/raddb/sites-available/aws-nlb
blob: 06ca632609bb9dc179bab028e958aeec2f26692b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
# -*- text -*-
######################################################################
#
#  A sample virtual server which handles "health checks" from Amazon
#  elastic load balancer.
#
#  https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-healthchecks.html
#
#  In the Amazon system, configure "proto" as "tcp", and "port" as the port
#  given below in the "listen" section.
#
#	$Id$
#
server aws-nlb {

#
#  This should be the IP address of the Amazon load balancer.
#
#  If TCP checks come from multiple IP addresses, just list each IP in a separate "client" section.
#
client aws-nlb {
	ipaddr = 192.0.2.1
	proto = tcp
	secret = "this-will-never-be-used"
}

#
#  Listen on a port.  Don't use 80, as that requires root permissions,
#  and you don't want to run radiusd as root.
#
listen {
	type = status
	proto = tcp
	ipaddr = *
	port = 8000

	#
	#  Set limits so that unused connections get cleaned up quickly.
	#
	limit {
	      max_connections = 16
	      lifetime = 5
	      idle_timeout = 5
	}
}

#
#  This will never get used, but it's here just in case we actually
#  get sent RADIUS packets.
#
authorize {
	reject
}

}