Re: [Pacemaker] Active-Active HA Firewall

2010-10-15 Thread Marcel Hauser
On 15.Oct 2010 13:26, Michael Schwartzkopff wrote: On Friday 15 October 2010 09:47:50 Marcel Hauser wrote: On 14.Oct 2010 22:31, Michael Schwartzkopff wrote: i do know about fwbuilder and that it's possible to use fw builder in order to build a cluster configuration. I've also

Re: [Pacemaker] multiple ip addresses on ha firewall

2010-10-15 Thread Marcel Hauser
On 15.Oct 2010 13:31, Michael Schwartzkopff wrote: On Friday 15 October 2010 11:57:48 Marcel Hauser wrote: Hi all what is the cleanest way to setup resources for an ha firewall with multiple (50) public ip's? do i have to create a resource for every single public ip and after t

[Pacemaker] multiple ip addresses on ha firewall

2010-10-15 Thread Marcel Hauser
Hi all what is the cleanest way to setup resources for an ha firewall with multiple (50) public ip's? do i have to create a resource for every single public ip and after that a resource for every internal ip (around 5 vlans) and then group them all together in a single group? thanks for th

Re: [Pacemaker] Active-Active HA Firewall

2010-10-15 Thread Marcel Hauser
On 15.Oct 2010 10:07, Pavlos Parissis wrote: I didn't quick search and I couldn't find it, what is the name of the book? search for "clusterbau" but it's written in german marcel ___ Pacemaker mailing list: Pacemaker@oss.clusterlabs.org http:

Re: [Pacemaker] Active-Active HA Firewall

2010-10-15 Thread Marcel Hauser
On 14.Oct 2010 22:31, Michael Schwartzkopff wrote: i do know about fwbuilder and that it's possible to use fw builder in order to build a cluster configuration. I've also read a pdf dated in feb 2009 about ha firewalls by using heartbeat. Yes, I know I should update that paper ;-) That would

[Pacemaker] Active-Active HA Firewall

2010-10-14 Thread Marcel Hauser
Hi All I'm very new to pacemaker... so please forgive me if i'm asking silly questions :-) I would like to build an HA Active-Active Firewall based on: - iptables - conntrack-tools - corosync - pacemaker i do know about fwbuilder and that it's possible to use fw builder in order to build a