Hi all, I'd like to know the group opnion about available GPL cluster solutions. At the moment I'm working with a solution based on ucarp (vip address) and rsync (conf syncs) without synchronizing the conntrack table - im using active / passive model. I'm adopting a configuration with two ucarp groups. One group determines which firewall will be dedicated to Internet control and other is for internal control. The most suitable configuration into Internet has been keepalived + conntrackd. I think it's a great alternative, but ... I'm having some doubts. What do you think of implementations with CLUSTERIP? I did some tests, but found it a bit unstable. Maybe for my mistakes. I found articles criticizing and others saying that the target CLUSTERIP will sync the conntrack table too. It's true? To synchronize the configuration i thought about using the DRDB, but i found it very complex to manage - increases the difficulty in adding or removing nodes. In tests that i did, I prefer GlusterFS. But i'm undecided. I still think rsync the most simple, secure and fast way to synchronize settings. In my opinion the other methods amplify the complexity unnecessarily (for firewalls). I found articles defending the cluster configuration with corosync + pacemaker. It seems a fairly complete solution, but thought is not ideal for firewall. I intend to test models with active/active, but there isn't much documentation on the subject. What opinion do you have about it (cluster solutions)? -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
