Linux Security theory/practice
-----Original Message----- From: Ryan Swenson Sent: Wednesday, May 15, 2002 11:15 AM To: 'suse-security@suse.com' Subject: Linux Security theory/practice
Hello,
1. Is it possible to take 2x kernel 2.4.18 systems with bridging, and = the firewall bridge patch compiled in and setup transparent bridging = along with iptable Forwarding permit or deny rules; Where we join both = interfaces of the bridge and configure static addresses on the bridged = ID interface, is it possible to now configure OSPF or BGP to provide = failover among 2 Linux Bridge Peer devices? In short you take two = switches and put in between them 2 transparent linux bridge firewalls = which will both have unique bridge ip addresses: should 1 of these = systems or interfaces fail, then the other will fail into a BGP = secondary until the primary is reinstated? Any enhanced dynamic = protocol should be fine and the only metric really concern is the weight = of each peer and perhaps a few iptable rules to limit the size of tables = for CPU/memory benefits as well.=20
If not with BGP or OSPF: with pirannha can serial/loadbalancing be = applied to the situation or interfaces of this kind of setup where = regardless of which device is up it must forward packets and extend the = medium for which traffic is within the same broadcasts domains?=20
In theory or practice?
Regards/Gruesse,
Ryan S.
Read it not in deepth, but some way the make system that kind of redundant may be to setup heartbeat. It got an ip- adress failover too http://linux-ha.org/
Hello,
1. Is it possible to take 2x kernel 2.4.18 systems with bridging, and = the firewall bridge patch compiled in and setup transparent bridging = along with iptable Forwarding permit or deny rules; Where we join both = interfaces of the bridge and configure static addresses on the bridged = ID interface, is it possible to now configure OSPF or BGP to provide = failover among 2 Linux Bridge Peer devices? In short you take two = switches and put in between them 2 transparent linux bridge firewalls = which will both have unique bridge ip addresses: should 1 of these = systems or interfaces fail, then the other will fail into a BGP = secondary until the primary is reinstated? Any enhanced dynamic = protocol should be fine and the only metric really concern is the weight = of each peer and perhaps a few iptable rules to limit the size of tables = for CPU/memory benefits as well.=20
If not with BGP or OSPF: with pirannha can serial/loadbalancing be = applied to the situation or interfaces of this kind of setup where = regardless of which device is up it must forward packets and extend the = medium for which traffic is within the same broadcasts domains?=20
Michael Appeldorn schrieb:
Michael Appeldorn
participants (3)
-
Carsten Meyer -
Michael Appeldorn -
Ryan Swenson