|
|||||||||||
|
Re: Failover
From: Chuck Yerkes <chuck+obsd(at)2003.snew.com>
Date: Wed Apr 30 2003 - 13:06:04 EDT
Quoting Bryan Irvine (bryan.irvine@kingcountyjournal.com):
If you use a routing protocol, not a static (default) route, then the routing daemon will handle it. OSPF is best, RIP might be acceptable. Routed runs fine on my Macs, all Unix and there's something on Windows, I'm sure. For a full failover daemon, you need to have the secondary be able to "see" the primary this means heartbeats over several paths including, ideally, the inside and outside interfaces and perhaps a private interface (Veritas HA does it over SCSI when sharing SCSI disks which we never did at Fusion Systems->OpenVision, serial via SLIP or just a "talker/listener" can work). Are you solding a problem that actually exists or theorizing one? I had routing/filtering firewalls with proxies that were up for 200-400 days at a time. A failure you have been fixed by bringing it down all the way and doing "ifconfig $INSIDE_IF alias $otherIP" on the second firewall (which mostly just ran an HTTP proxy). E.g. I over engineered the firewalls (too cool, too much power) and they never went down. > Or maybe I'm not thinking on the correct scale because I'm rather sleepy
> On Tue, 2003-04-29 at 19:03, Chuck Yerkes wrote:
This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 13:34:25 EDT |
||||||||||
|
|||||||||||