Tag Info

New answers tagged

0

Nothing wrong with mixing IPsec and OpenVPN, nor is there a problem doing OpenVPN with HA. When using OpenVPN client instances on an HA pair, you must bind them to a CARP IP so they only run when CARP has master status.


1

Stacking is not a requirement for active-passive bonding. See https://support.citrix.com/article/CTX132559 for clarification on the stacking requirements. If the failure causes one of the bonded links to go down, XenServer will fail-over to the secondary link and send out gratuitous ARPs to ensure the switch knows about the MACs of the VMs running on the ...


4

Sobrique explains how the manual intervention causes your proposed solution to be sup-optimal, and ewwhite talks about probability of failure of various components. Both of those IMO make very good points and should be strongly considered. There is however one issue that nobody seems to have commented on at all so far, which surprises me a little. You ...


2

The concept of having a hot or even cold spare is dependent how the application(s) are built in the first place. What I mean is that if the application has been built in such a way that the data and service load is spread across multiple machines then the concept of any single machine taking the system down should go away. In that situation you don't need ...


4

The fact that it is old school doesn't necessarily make the use of a hot spare a bad idea. Your main concern should be the rationale, what are the risks you run, and how does running a hot spare mitigate them. Because in my perception your hot spare only addresses hardware failure, which is although not uncommon, neither the only operational risk you run, ...


7

It's rather inefficient - not least because of the dependency on manual intervention to make the switch. I have worked at places that run a hot DR site - literally, identical servers to the primary, ready to go instantly. However the DR switchover is an automated process - we're not talking cabling, a bit of fiddling and a switch, but a process when we ...


10

Yes, it's a bit old school. Modern hardware doesn't just fail that often. Focus either on making your applications more highly-available (not always possible), or on the items needed to make your individual hosts more resilient... For hosts: Buy better hardware. Ensure you have support contracts. REGISTER your servers' support contracts (spare parts are ...


0

we use an integrated ldap dns solution (freeipa.org, the version delivered with centos 6 which is in Redhat jargon 'Identity Management'). All dns servers are masters and have dynamic updates. But freeipa does much more than that, so it may not be the solution you are looking for. You could take a look at it to see how they integrate bind9 and ldap to ...



Top 50 recent answers are included