Avatar of mnevoso
mnevoso
Flag for United States of America asked on

Load Balancing RDS Servers and RDWeb

I am setting up two RDS servers for load balancing. What i would like to do is setup rdweb on a seperate server that the clients connect too.  Once they connect they login and have the option to connect to the rds server (either rds01 or rds02)  whichever is accepting connections. I do not want to have to setup a VPN for the users and i would like to make this as simple as possible on there end.  WOuld i need need a RDS Broker and Gateway Service? Not to sure where to start with right now.
Windows Server 2008

Avatar of undefined
Last Comment
mnevoso

8/22/2022 - Mon
Vinchenzo-the-Second

You only need the broker if want load balance between rdweb and vdi, if you want load balance for the session host then DNS round robin is your only free choice.  You will need a gateway if you want users to come in from the internet
mnevoso

ASKER
what is vdi?

the way we have it setup now is from the web we want users to connect to rdweb then connect to the rdfarm session broker which will distribute which rds server the user connects to. The gateway is the only way to get the users to connect from rdweb to internal rds server then correct?
Vinchenzo-the-Second

VDi - Virtual Deskop Interface.  You create them using Hyper-V.

The Gateway will route to RDWeb via the broker. If you want your users to open a session on an RD host the broker can not load balance this, you have to use round robin in DNS
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
mnevoso

ASKER
also do you know what dns names i would need to create if i am using a SAN certificate?

rdsfarm.domainname.com
rds01.domainname.com
rds02.domainname.com
rdsfarm.domain.local
rds01.domain.local
rds02.domain.locl

or no?
Vinchenzo-the-Second

you need to use your farm name.  You create A records for every RDS server you have using the farm name, this is how DNS will load balance.
mnevoso

ASKER
yes the load balance i undrestand but for the public to access rdweb/rds hosts with a san certificate should i add all entried for public and local?
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Vinchenzo-the-Second

Yes add them
mnevoso

ASKER
ok, the certificate is done. i am going through the setup and for the life of me i cannot get the rd gateway and rd session broker to work correctly

Servers:

rds01 - host in farm only (no rdweb installed)
rds02 - host in farm only (no rdweb installed)
RDSFarm - farm name (round robin dns)

rdsbroker - rd gateway/rd broker/ licensing/rdweb server

i cannot get the rdp icon to populate in rdweb. i was before but i made some changes following ms articles and it disappeared. i believe i have the rd gateway and session host configuration done correctly now as the RDSFarm populates as a farm with both servers.  i also went into config on rdweb site and selected broker and put in rdsbroker.xxx.local. what i want to do is connect to rdweb have the rdp link sitting there and the users to click that and it connects to broker and pushes to farm and chooses a server to connect to. any ideas?
ASKER CERTIFIED SOLUTION
Vinchenzo-the-Second

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
mnevoso

ASKER
thanks, i was able to resolve it, stupidly i didnt realize the gateway needed to be public facing. i was able to get everything working now, i just have one issue locally if i try to connect to the host servers i can connect to one at a time but the other gives an error message saying

"The connection cannot be completed because the remote computer that was reached is not the one you specified. Thus could be caused by an outdated entry in DNS Cache.  Try using the IP address of the computer instead of the name"

i enter the IP address and it goes to the other server. is there a way to resolve this for admin purposes?
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
Vinchenzo-the-Second

Flush the DNS cache on the client.

That why I mentioned it about the gateway needs to be in DMZ because it needs direct acess to the net.
mnevoso

ASKER
already flushed the dns cache. is there a reason why it does that?