similar to: Active/Passive Samba Cluster for Shared NFS Backend

Hi, I have HA firewalls configuration (keepalived) on one site. Each firewall has its own IP and a Virtual IP (VIP) that keepalived activate on one of the firewall (active/passive HA configuration). I think I can set all two firewalls with same configuration, generating key pairs on one firewall and copying that to the second, so the remote host can see always one of the other firewall as the

I have 2 firewall in HA with keepalived. Can I use active the same tinc configuration on 2 firewalls ? using tun Interface with same ip on all 2 nodes is a problem ? tun device advertise itself on the network having an IP/MAC pairs (ARP) or the IP is only used by the system internally for routing so using the same configuration is right ? so one firewall be active, the other is passive. With this

This is a vpn for Disater Recovery sites, so it is not necessary to have a seamless failover, strictly speaking. Encryption instead is mandatory. Testing we found that on Keepalived failover remote Tinc take few seconds to reset the connection and correctly re-connect to the new active firewall (probably new firewall resetting the connection + PingTimeout + some seconds to reconnect). This is

This is what I want to avoid :D I want an active Tinc virtual interface active with ip identical of the other firewall, without ip conflict on the same network. Do you know if Tun type virtual interface on one host can have same ip address of another host in the same network without ip conflict ? ie if a tun virtual interface can work active without transmitting on real network ? or if such a

Hi Saverio, I found conflict: 172.16.1.10 00:50:56:1b:ba:5e VMware, Inc. 172.16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 2) 172.16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 3) 172.16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 4) 172.16.1.10 00:50:56:2b:12:e6 VMware, Inc. (DUP: 5) So my assumptions were wrong ! :D Probably Virtual

Hi System debian 8.11 and dovecot-2.2.36.4 My webmail is roundcube with imapproxy. I have one problem. My dovecot servers is are in a cluster with keepalived like: dovecot1----VIP-IP--------dovecot2 All works fine I have a problem with imapproxy when a server dovecot1 had a problem (kernel panic sic!) Keepalived works perfecty and moved VIP to dovecot2 - all works fine for normal users but

Hi, I've setup two server A + B (debian etch) with drbd + heartbeat in active/passive mode. If the primary server A fails, the shared storage is mounted on B, the virtual ip A-vip moves to the new primary B and samba is started by heartbeat. This works well, but I'm not sure which samba files should be identical on both server. Both have a dedicated machine account at the moment.

Hi, list, I'm going to deploy postfix + dovecot + CephFS( as Mail Storage). Basically I want to use two servers for them, which is kind of HA. My idea is that using keepalived or Pacemaker to host a VIP, which could fail over the other server once one is down. And I'll use Haproxy or Nginx to schedule connections to one of those server based on source IP( Session stickiness),

Anybody else noticed this: debug: package provider yum: Executing ''/usr/bin/yum -d 0 -e 0 list available portmap'' err: //nfs_server/Package[portmap]: Failed to retrieve current state of resource: Could not get latest version: Execution of ''/usr/bin/ yum -d 0 -e 0 list availaSearching 100% | =========================| 16 kB 00:03 Error: No

I think it should work at least for TUN virtual interface as TUn works at IP level. This is a sample configuration. firewall1 lan = 172.16.1.11/19 (ALWAYS ACTIVE) - "Physical Network Interface" - system config as ifcfg-... 172.16.1.10/19 (VIP Keepalived Make active) - Active/Passive configuration with firewall2 firewall1 vpndr1

Ok, I think synching 2 firewalls are best solution with keepalived active/passive HA, too. I'll try this solution to see if all goes straitforward between failover/failback and tinc communications. Thank you Guus. Best regards Roberto -----Original Message----- From: tinc [mailto:tinc-bounces at tinc-vpn.org] On Behalf Of Guus Sliepen Sent: venerd? 22 gennaio 2016 10.24 To: tinc at

Em 29-09-2015 15:03, Gordon Messmer escreveu: > On 09/29/2015 09:14 AM, Tim Dunphy wrote: >> And if I do an ifconfig command I see no evidence of an eth1 existing. > > "ifconfig -a" will show you all of your interfaces. Maybe there is a confusion here. Sounds like Tim thought keepalived would create that eth1, like a tunnel interface, but it won't. You have to

Hi, right now I am using only one external server as a gateway for the internal servers. I would like to enable a fail-over on a second server. To implement the floating VIP, should I use heartbeat+pacemaker? Or is there something more "lightweight"? Basically, I just need server2 up the VIP when server1 is down, and server2 down the VIP when server1 is back up (or server 1 does not up

I have been successfully using the technique of creating "virtual servers" via the method outlined below in my smb.conf file. [global] netbios name = %h workgroup = WORKGROUP netbios aliases = cifs1 cifs2 include = /etc/samba/smb.conf.%L Now under Red Hat ES release 4 with kernel "2.6.9-11.EL" and Samba version

Hi. trying to get a domU (dom1) up using nfs root. never done this before ;-). I have dom0 up (2.6.12-xen0) and i have an external nfs server with a nice root disk populated. i get this after xm create -c dom1 vmid=1 . . . IP-Config: Complete: device=eth0, addr=172.31.205.229, mask=255.255.255.0, gw=172.31.205.2, host=vm%d, domain=, nis-domain=(none),

Hi I have two server directors in ring and 5 dovecot servers (2.2.36) IP for IMAP and POP3 is a VIP (keepalived) What is the best solutions to get realy HA for 5 dovecot servers ? Maby corosync+pacemeker ? But this solution is too problematic and hardcore Why I need HA ? Doveadmin is too lazy and doveadm director does not know that one machine broke down and still sends traffic

Hi Everyone, We are setting up some READ-ONLY Samba servers, mounted from the same volume on a SAN. The files are media files to be played out by Windows Media Servers mounted on Win2003. Here are my thoughts about possible configurations, would someone mind letting me know what would the best option be? A) DNS Round Robin Have foo.domain resolve to 10.0.0.1, 10.0.0.2, 10.0.0.3. 10.0.0.1

This seems like another basic question because I always assumed that if I threw something in my /etc/fstab then it will be automatically mounted at boot time (unless I put in the 'noauto' option). But my NFS partition isn't getting mounted, here's the excerpt from my /etc/fstab file, split on the whitespace so it's easier to read: nfs_server:/exports/var/www /var/www nfs

Are virtual IPs supported on eth interfaces in domU(s)? Thanks _______________________________________________ Xen-users mailing list Xen-users@lists.xensource.com http://lists.xensource.com/xen-users

Hello everyone! I am working on implementing my first Gluster/Ganesha NFS setup and I am flowing this guide: http://blog.gluster.org/2015/10/linux-scale-out-nfsv4-using-nfs-ganesha-and-glusterfs-one-step-at-a-time Everything is working fine. I've got Gluster and Ganesha NFS working and I have VIPs on each node and it is failing over fine, if a little slowly. However, the VIPs don't