RE: Using heartbeat for fall over on IPTables Firewall

["Antonio Paulo Salgado Forster" <aforster@br.ibm.com>]

a few more reasons:

3)  faster takeover;

4)  "guaranteed persistence routing path" (from keepalived.org) -  the
famous  sync_groups

5) interface flags monitoring (through VRRP framework);

6) etc;

7) etc;

IMHO, heartbeat is great for applications servers such as DBs, web servers,
(using) shared disks,  etc.  For routers, firewalls or load balancers,
keepalived rulez.

Read the documentation at web site...

Forster



Steve Mickeler <steve@warning.ca> on 03/17/2003 07:08:26 PM

To:    Chip Upsal <cupsal@cyberwolf.com>
cc:    Antonio Paulo Salgado Forster/Brazil/IBM@IBMBR,
       netfilter@lists.netfilter.org
Subject:    RE: Using heartbeat for fall over on IPTables Firewall





Just off the top of my head:

1) heartbeat is limited to 2 nodes

2) keepalived config is much cleaner and easier to manage.



On Mon, 17 Mar 2003, Chip Upsal wrote:

> in what ways is this better then heartbeat?
>
> -----Original Message-----
> From: Steve Mickeler [mailto:steve@warning.ca]
> Sent: Monday, March 17, 2003 1:39 PM
> To: Antonio Paulo Salgado Forster
> Cc: Chip Upsal; netfilter@lists.netfilter.org
> Subject: Re: Using heartbeat for fall over on IPTables Firewall
>
>
>
> I'll second the vote for keepalived.
>
> Its an amazing tool.
>
> http://www.keepalived.org/
>
>
>
>
> On Mon, 17 Mar 2003, Antonio Paulo Salgado Forster wrote:
>
> >
> > Suggestion: Try using keepalived instead.
> >
> > Regards,
> >
> > Forster
> >
> >
> > Chip Upsal <cupsal@cyberwolf.com>@lists.netfilter.org on 03/17/2003
> > 01:16:46 PM
> >
> > Sent by:    netfilter-admin@lists.netfilter.org
> >
> >
> > To:    netfilter@lists.netfilter.org, "'linux-ha@muc.de'"
> <linux-ha@muc.de>
> > cc:
> > Subject:    Using heartbeat for fall over on IPTables Firewall
> >
> >
> >
> > I am looking to use heartbeat to provide fall over for my iptables
> > firewall.
> > I am looking for those with experience using these tools together.
> >
> > I plan to use RH7.2 on the firewalls.
> >
> > I made some attempts at implementing such a solution but i ran into a
few
> > problems.
> >
> > I would like suggestions on setup of the heartbeat configuration files.
> > Pointers on the iptables startup script. and advice on what kernel
version
> > to use and if any patches need to be applied.
> >
> > Thanks in advance,
> >
> > Chip
> >
> >
> >
> >
> > Chip Upsal
> > SysAdmin
> > CyberWolf Inc
> >
> >
> >
> >
> >
>