Yeah I did actually have a look at those, except the last one.
My question was more about firewalls. I know there are tutorials how to set them up on this site as well. But I'm trying to figure out what kind of setup is optimal with what hardware. In theory I know all the possibilities because I've been browsing this forum. What I'm trying to figure out is the optimal solution. So, should we separate firewall from web server completely, by hardware hosts or just by virtual hosts or is it OK to put web server and firewall on the same machine. Things like that, more general. You know what I mean? I'm sure this is of interest to many who are setting up networks.
To study this kind of stuff, do you know of any good tools to monitor performance on Linux systems which are preferably open source?
A problem that I came across:
When I followed the howto http://www.howtoforge.com/high_avail...apache_cluster
I made a mistake and put two different load balancers into the file /etc/ha.d/haresources (i.e. loadb1's `uname -n` in loadb1 and loadb2's `uname -n` output in loadb2.
I tried reversing the step by putting loadb1's output into the file of loadb2 and restarting the services, but the output of `ipvsadm -L -n` still gave the same on loadb1 and loadb2:
IP Virtual Server version 1.2.1 (size=4096)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP 192.168.0.105:80 rr
-> 192.168.0.101:80 Route 0 0 0
-> 192.168.0.102:80 Route 0 0 0
-> 127.0.0.1:80 Local 1 0 0
it would be if it was exactly the same setup as the one in the howto.
Do you know what I'm missing? Is there another service I need to restart that I might have forgotten?
Thanks for all the good and easily understandable howtos and all the technical support. The howtos are greatly appreciated by (probably) many. :-)
Always mention at least your distribution/version! You can add it in your signature if you don't want to always type it. ;-)
Ubuntu 5.10 with custom kernel (2.6.16-suspend2),
Debian Sarge 3.1 and Etch
Please submit your ISP or Webhost to (free)