Link to home
Start Free TrialLog in
Avatar of mnevoso
mnevosoFlag for United States of America

asked on

Load Balancing RDS Servers and RDWeb

I am setting up two RDS servers for load balancing. What i would like to do is setup rdweb on a seperate server that the clients connect too.  Once they connect they login and have the option to connect to the rds server (either rds01 or rds02)  whichever is accepting connections. I do not want to have to setup a VPN for the users and i would like to make this as simple as possible on there end.  WOuld i need need a RDS Broker and Gateway Service? Not to sure where to start with right now.
Avatar of Vinchenzo-the-Second
Vinchenzo-the-Second
Flag of United Kingdom of Great Britain and Northern Ireland image

You only need the broker if want load balance between rdweb and vdi, if you want load balance for the session host then DNS round robin is your only free choice.  You will need a gateway if you want users to come in from the internet
Avatar of mnevoso

ASKER

what is vdi?

the way we have it setup now is from the web we want users to connect to rdweb then connect to the rdfarm session broker which will distribute which rds server the user connects to. The gateway is the only way to get the users to connect from rdweb to internal rds server then correct?
VDi - Virtual Deskop Interface.  You create them using Hyper-V.

The Gateway will route to RDWeb via the broker. If you want your users to open a session on an RD host the broker can not load balance this, you have to use round robin in DNS
Avatar of mnevoso

ASKER

also do you know what dns names i would need to create if i am using a SAN certificate?

rdsfarm.domainname.com
rds01.domainname.com
rds02.domainname.com
rdsfarm.domain.local
rds01.domain.local
rds02.domain.locl

or no?
you need to use your farm name.  You create A records for every RDS server you have using the farm name, this is how DNS will load balance.
Avatar of mnevoso

ASKER

yes the load balance i undrestand but for the public to access rdweb/rds hosts with a san certificate should i add all entried for public and local?
Yes add them
Avatar of mnevoso

ASKER

ok, the certificate is done. i am going through the setup and for the life of me i cannot get the rd gateway and rd session broker to work correctly

Servers:

rds01 - host in farm only (no rdweb installed)
rds02 - host in farm only (no rdweb installed)
RDSFarm - farm name (round robin dns)

rdsbroker - rd gateway/rd broker/ licensing/rdweb server

i cannot get the rdp icon to populate in rdweb. i was before but i made some changes following ms articles and it disappeared. i believe i have the rd gateway and session host configuration done correctly now as the RDSFarm populates as a farm with both servers.  i also went into config on rdweb site and selected broker and put in rdsbroker.xxx.local. what i want to do is connect to rdweb have the rdp link sitting there and the users to click that and it connects to broker and pushes to farm and chooses a server to connect to. any ideas?
ASKER CERTIFIED SOLUTION
Avatar of Vinchenzo-the-Second
Vinchenzo-the-Second
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of mnevoso

ASKER

thanks, i was able to resolve it, stupidly i didnt realize the gateway needed to be public facing. i was able to get everything working now, i just have one issue locally if i try to connect to the host servers i can connect to one at a time but the other gives an error message saying

"The connection cannot be completed because the remote computer that was reached is not the one you specified. Thus could be caused by an outdated entry in DNS Cache.  Try using the IP address of the computer instead of the name"

i enter the IP address and it goes to the other server. is there a way to resolve this for admin purposes?
Flush the DNS cache on the client.

That why I mentioned it about the gateway needs to be in DMZ because it needs direct acess to the net.
Avatar of mnevoso

ASKER

already flushed the dns cache. is there a reason why it does that?