[SOLVED] Heartbeat (linux-ha) with iptables and opnvpn

matiasar · 11-11-2010, 02:23 PM

I'd like high-availability feature to firewall (iptables) and openvpn service I'm running at my job. Mi project is two firewall boxes in a active/pasive configuration. And if it's possible sync connections' states.

I started reading on heartbeat and I'd like to hear some advices and take away some doubts:

1) For the config I'm planning heartbeat service is enough or it would require a CRM service such as pacemaker.

2) Anyone knows some doc/tutorial that would be helpfull for this project?

Thanks!

fordeck · 11-12-2010, 08:09 AM

You've probably already been using the http://www.linux-ha.org/wiki/Main_Page as a resource. If not it is one of the most up to date source's I'm aware of. Also "Karl Kopper's" book "Linux Enterprise Cluster" would be another in depth resource related directly to the Linux HA project.

Regards,

Fordeck

sarajevo · 11-12-2010, 02:48 PM

Take a look at CARP ( OpenBSD project )
http://www.openbsd.org/faq/pf/carp.html if you are not strictly decided to go with debian/iptables.

hth

matiasar · 11-15-2010, 02:00 PM

Thank you fellows for the info.
I'd really like to keep on Linux as long as the "standalone" boxes are already in production. Migrating to openbsd would be an overhead, despite cluster with CARP seems to be simpler as far as I'm concerned.

Regards,
Matías