Re: [Pacemaker] iptables cluster

2012-02-20 Thread Andrew Beekhof
On Thu, Feb 16, 2012 at 7:33 AM, Devin Reade wrote: > --On Monday, February 13, 2012 11:21:14 AM +0200 Karlis Kisis > wrote: > >> In most cluster tutorials, for simplicity, iptables is turned off. >> Funny thing is that iptables is what I want to configure in HA cluster >> (as redundant firewalls

Re: [Pacemaker] iptables cluster

2012-02-16 Thread Karlis Kisis
Thank you thank you thank you :) > Date: Wed, 15 Feb 2012 13:33:35 -0700 > From: Devin Reade > To: pacemaker@oss.clusterlabs.org > Subject: Re: [Pacemaker] iptables cluster > Message-ID: <180d2fd0e014d9f01336b...@radelix.gno.org> > Content-Type: text/plain; charset=

Re: [Pacemaker] iptables cluster

2012-02-15 Thread Devin Reade
--On Monday, February 13, 2012 11:21:14 AM +0200 Karlis Kisis wrote: > In most cluster tutorials, for simplicity, iptables is turned off. > Funny thing is that iptables is what I want to configure in HA cluster > (as redundant firewalls). I debated about answering this off-list, since it might b

Re: [Pacemaker] iptables cluster

2012-02-13 Thread Florian Crouzat
Le 13/02/2012 10:21, Karlis Kisis a écrit : Question #2: The whole clustering thingy works by stopping the service on one node and starting it on the other. In my case, I would not want iptables to be stopped but instead restarted with a "passive" config, like block all traffic from outside (inst

Re: [Pacemaker] iptables cluster

2012-02-13 Thread Karlis Kisis
I found the descriptions of resource agents here: http://doc.opensuse.org/products/draft/SLE-HA/SLE-ha-guide_sd_draft/app.agents.details.html Thanks, Karlis 2012/2/13 Karlis Kisis : > Hi, > > In most cluster tutorials, for simplicity, iptables is turned off. > Funny thing is that iptables is what