G'Day
I know that ASL 3.0 will have high availability for the firewall. That got me to thinking about how to do high availability for a server on the DMZ. Using the firewall it is not too hard to ensure the availability of the server. The answer is some automated DNAT.
My idea... Lets say we have two servers A & B. The IP addresses are x.x.x.10 and x.x.x.11. Think of these addresses as private.
Place x.x.x.12 in the DNS as the public address. Have ASL DNAT it to x.x.x.10.
Now on the Astaro box have an automated progam that does some type of PING of x.x.x.10 every x seconds. Should this fail, have the DNAT change the address to x.x.x.11.
That assumes that the services offered on both servers are basically identical - but that is not a major issue. This type of software would really help me at my home office where I am duplicating major hardware so that if I have a server fail and I am overseas consulting then I do not need to get my mother to fix things for me.
Darryl
Darryl@radio-active.net.au
This thread was automatically locked due to age.
Guest User!
You are not Sophos Staff.
