Unicon - SCG - Ensuring propred load Balancin across SCG instances in a Cluster

book

Article ID: CTX696019

calendar_today

Updated On:

Description

Each SCG instance must be reachable by the eLux devices managed via the SCG. Every VPN subnet from each SCG instance must be routed from the Scout server. Each eLux endpoint receives an OpenVPN configuration file containing a list of SCG instances. When connecting, the device attempts to open a VPN tunnel with the instance that currently has the least load, and if unreachable, it proceeds to the next instance. This setup enables dynamic load balancing, where devices may connect to different SCG instances after reboots depending on availability and load.

Cause

Devices may connect only to a single SCG instance if network reachability is incomplete, VPN subnet routing is missing for one or more instances, or eLux devices do not have an updated VPN configuration listing all SCG instances.

Resolution

  1. Network Accessibility: Each SCG instance must be reachable by the eLux devices that will be managed via the SCG.

  2. VPN Subnet Routing: Ensure that each VPN subnet from every SCG instance is routed from the Scout server:
    image.png

  3. VPN Configuration on eLux Devices:

    • Each eLux endpoint will receive a (Open) VPN configuration file, which includes a list of SCG instances (VPN servers).
    • When connecting, each eLux client will open a VPN tunnel with one of the SCG instances in this list. The device will attempt to connect first to the instance with the least load. If that instance is not reachable, it will try the next one in the list.
  4. Dynamic Load Balancing: This configuration enables load balancing, where:

    • Each eLux endpoint establishes a VPN tunnel with an SCG instance based on the current load and availability.
    • The eLux device will receive a VPN IP address from the connected SCG instance.
    • After a reboot, the device may connect to a different SCG instance depending on the updated list and current load.

Issue/Introduction

If onboard devices are using only one SCG (Scout Cloud Gateway) instance in a clustered environment with multiple SCG instances, verify that the setup meets the necessary requirements.

Additional Information

To enable balanced use of multiple SCG instances, ensure network reachability, proper VPN subnet routing, and updated VPN configurations on all eLux devices. This setup dynamically balances load across SCG instances, promoting optimal performance and stable connection distribution within the cluster.