full-disclosure - Re: clustering question

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 26 Feb 2008 14:02:19 -0800 (PST)
From: Bill Stout <billbrietstout@...oo.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: clustering question

This is security related?

Clustered firewall/vpn appliances have to be the same family as they replicate configuration (and sometimes state info) to each other.  Usually the size of the appliance is related to user licenses and options like SSL accelleration, so from the hardware perpsective they have to have the same components.

[Early '90s' answer]  If you're talking about a firewall configuration, as long as the services failover differently sized systems will be fine.  The cluster can be full capacity when both are up, and operate in degraded capacity mode with all services running on one server, or if a service fails over to a smaller system it will run in degraded mode.  I configured a Dec Seal1 gatekeeper cluster on Digital Ultrix for a west coast bank way back when, they had some services (FTP, SSL) on one server and other services on a another (NTP, SMTP).  The clustering software handled service (screend) and virtual IP failover and the configuration files on the shared RAIDset.  The systems were equally sized.  I haven't seen an application firewall cluster since then.

Bill Stout

----- Original Message ---- 
From: shadow floating <nadengine@...glemail.com> 
To: full-disclosure@...ts.grok.org.uk 
Sent: Tuesday, February 26, 2008 5:35:17 AM 
Subject: [Full-disclosure] clustering question 

Hi all, 
just a simple question 
when i'm building a cluster, do i have to have all machines in the 
cluster be exactly the same capacity ,configuration and brand? (cpu 
power, storage,network connectivity and memory) 
thank alot 

regards, 

_______________________________________________ 
Full-Disclosure - We believe in it. 
Charter: http://lists.grok.org.uk/full-disclosure-charter.html 
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/