#------------------------------------------------------------------------------
# Global variables
#------------------------------------------------------------------------------
timeout 4000
interval 15
log all

#------------------------------------------------------------------------------
# LDAP services
#------------------------------------------------------------------------------

table <relay-ldap-servers> {      \
  10.1.2.11, 10.1.2.12, \
  10.1.2.13, 10.1.2.14  \
}

redirect ldap {
        listen on 10.1.2.131 port 636
        session timeout 600
        forward to <relay-ldap-servers> port 636 check tcp mode roundrobin
        match pftag LB_TO_SEC
}

#---------------------------
# Internal DNS LB
#---------------------------

table <relay-rfcdns-servers> { 169.154.147.241, 169.154.147.242, 169.154.147.243 }

redirect rfcdns-udp {
        listen on 10.1.2.147 udp port 53
        forward to <relay-rfcdns-servers> port 53            \
          check script "/usr/local/sbin/check-dns-udp.sh" \
          timeout 4000                                    \
          interval 15                                     \
          mode roundrobin
          match pftag LB_TO_DNS
}

redirect rfcdns-tcp {
        listen on 10.1.2.147 tcp port 53
        forward to <relay-rfcdns-servers> port 53            \
          check script "/usr/local/sbin/check-dns-tcp.sh" \
          timeout 4000                                    \
          interval 15                                     \
          mode roundrobin
          match pftag LB_TO_DNS
}

#---------------------------
# BF site level relay  LB
#---------------------------

table <relay-bfslr-servers> { 10.1.2.206, 10.1.2.207, 10.1.2.208, \
                              10.1.2.209, 10.1.2.210, 10.1.2.211, \
                              10.1.2.212, 10.1.2.213, 10.1.2.214, \
                              10.1.2.215 }

redirect bfslr-tcp {
        listen on 10.1.2.150 tcp port 52311
        forward to <relay-bfslr-servers> port 52311            \
          check tcp \
          timeout 4000                                    \
          interval 15                                     \
          mode roundrobin
          sticky-address
          match pftag LB_TO_CDM
}