View Single Post
  #4  
Old 28th June 2006, 11:29
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,747 Times in 2,578 Posts
Default

Quote:
Originally Posted by geek.de.nz
Yeah I did actually have a look at those, except the last one.

My question was more about firewalls. I know there are tutorials how to set them up on this site as well. But I'm trying to figure out what kind of setup is optimal with what hardware. In theory I know all the possibilities because I've been browsing this forum. What I'm trying to figure out is the optimal solution. So, should we separate firewall from web server completely, by hardware hosts or just by virtual hosts or is it OK to put web server and firewall on the same machine. Things like that, more general. You know what I mean? I'm sure this is of interest to many who are setting up networks.
I'd most likely put the firewalls on the Apache nodes.

Quote:
Originally Posted by geek.de.nz
To study this kind of stuff, do you know of any good tools to monitor performance on Linux systems which are preferably open source?
http://www.howtoforge.com/server_monitoring_monit_munin

Quote:
Originally Posted by geek.de.nz
A problem that I came across:
When I followed the howto http://www.howtoforge.com/high_avail...apache_cluster
I made a mistake and put two different load balancers into the file /etc/ha.d/haresources (i.e. loadb1's `uname -n` in loadb1 and loadb2's `uname -n` output in loadb2.
I tried reversing the step by putting loadb1's output into the file of loadb2 and restarting the services, but the output of `ipvsadm -L -n` still gave the same on loadb1 and loadb2:
Code:
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
  -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
TCP  192.168.0.105:80 rr
  -> 192.168.0.101:80             Route   0      0          0
  -> 192.168.0.102:80             Route   0      0          0
  -> 127.0.0.1:80                 Local   1      0          0
it would be if it was exactly the same setup as the one in the howto.

Do you know what I'm missing? Is there another service I need to restart that I might have forgotten?
Looks ok to me.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote