On Wednesday 08 September 2004 11:19 am, Chris Ess wrote:
> > I'd like to connect via an encrypted shell, like SSH, but I'd
> > also like the connection to be persistent, to avoid connection
> > costs for batch operations. I'd also like to provide a FIFO
> > queue mechanism so that if the mail server reboots, anyone
> > working on the billing server won't get error messages when
> > they attempt to provision services. Then, when the mail server
> > comes back up, the SSH tunnel is re-established and the
> > queued operations begin to execute.
> >
> > However, so far in my google searches I haven't seen anything
> > that would help me implement a persistent SSH connection
> > with a FIFO queue.
> >
> > Can anyone give me tips?
> 
> Have you considered....
> 
> 1. A VPN between the two?

solves encryption, but not persistence. Also, that's a rather heavy-weight
solution.


> 2. Using an on-demand connection method rather than a persistent method?

Trying to avoid it. Our CSRs see the billing server pause while the hook
executes to provision a service. I want to keep that pause time to a minimum.


> 3. Just connecting to a dedicated socket or service rather than SSH?

Not secure, and how would that work? I thought vpopmail's only manipulation
system is either SQL or command line based...


> 4. The security issues inherent in connecting your billing server to your
> mailserver?

Sure. People do it all the time, right?


> To keep this topic vaguely vpopmail-related, have you considered keeping
> all of the necessary vpopmail information (or at least most of it) in a
> MySQL database or some other separate data repository and having something
> on your billing server update that?

It's been suggested. I'm not happy with that solution though. I'd rather keep
it command line based.


> (Or, alternatively, why not run the 
> MySQL database on your billing server if you go that route?

Kills scalability. Bad solution.

-- 
Jesse Guardiani, Systems Administrator
WingNET Internet Services,
P.O. Box 2605 // Cleveland, TN 37320-2605
423-559-LINK (v)  423-559-5145 (f)
http://www.wingnet.net

Reply via email to