Resource Type: ilb_rule

Defined in:

lib/puppet/type/ilb_rule.rb

Providers:

ilb_rule

Overview

Manage Solaris Integrated Load Balancer (ILB) rule configuration. Existing rules cannot be modified they will be removed and re-created

Properties

• conn_drain

  If a server's type is NAT or HALF-TYPE, conn-drain is the timeout after which the server's connection state is deleted following the server's removal from a rule. This deletion occurs even if the server is not idle.

  The default for TCP is that the connection state remains stable until the connection is gracefully shutdown. The default for UDP is that the connection state remains stable until the connection has been idle for the period nat-timeout.

  Supported values:

  • /^\d+$/
• enabled

  Indicates if the rule should be enabled or disabled

  Supported values:

  • true
  • false
• ensure (defaults to: present)

  The basic property that the resource should be in.

  Supported values:

  • present
  • absent
• hc_name

  Specifies the name of a predefined health check method

  Supported values:

  • /^\p{Alnum}+$/
• hc_port

  Specifies the port(s) for the HC test program to check. The value can be keywords ALL or ANY, or a specific port number within the port range of the server group.

  Supported values:

  • all
  • any
  • /^\d+$/
• lbalg (defaults to: roundrobin)

  The default is roundrobin, Other alternatives are: hash-ip, hash-ip-port, hash-ip-vip

  Supported values:

  • roundrobin
  • hash_ip
  • hash_ip_port
  • hash_ip_vip
• nat_timeout

  Applies only to NAT and half-NAT type connections. If such a connection is idle for the nat-timeout period, the connection state will be removed. The default is 120 for TCP and 60 UDP.

  Supported values:

  • /^\d+$/
• persist_timeout

  When persistent mapping is enabled, if a numeric-only mapping has not been used for persist-timeout seconds, the mapping will be removed. The default is 60.

  Supported values:

  • /^\d+$/
• persistent (defaults to: false)

  Create a persistent rule. When provided a pmask value this enables session persistence Default: false

  Pmask: The argument is a prefix length in CIDR notation; that is, 0-32 for IPv4 and 0-128 for IPv6. The larger the mask the more of the IP address is used to generate the session mapping. i.e. An IPv4 address has 32 bits

  Supported values:

  • /true/i
  • /false/i
  • %r(/\d+$)
• port

  Port number or name, for example, telnet or dns. A port can be specified by port number or symbolic name (as in /etc/services). Port number ranges are also supported 'port[-port]'.

  ** Note ** The use of numerical ports is recommended. Service names are not validated at compilation time and may fail on individual nodes.

• protocol (defaults to: tcp)

  TCP (the default) or UDP (see /etc/services).

  Supported values:

  • tcp
  • udp
• proxy_src

  Required for full NAT only. Specifies the IP address range to use as the proxy source address range. The range is limited to ten IP addresses.

• servergroup

  Specifies destination(s) for packets that match the criteria specified by the incoming packet spec. Specify a single server group as target. The server group must already have been created. Any matching ilb_servergroup resource will be auto required

  Supported values:

  • /^[\p{Alnum}_]+$/
• topo_type

  Refers to topology of network. Can be DSR, NAT, or HALF-NAT

  Supported values:

  • dsr
  • nat
  • half_nat
• vip

  (Virtual) destination IP address

Parameters

• name (namevar)

  Name for the ilb rule