🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: ch.comp.os.linux
Article #24785

Re: High security server

#24785
From: Matthias Scherrer
Date: Sat, 23 Jan 1999 00:00
46 lines
2395 bytes
Hi,

Olivier M. schrieb in Nachricht ...

>The final goal is to have 2 separate servers (hosted at different
>providers) with same setup and harddisk contents, so that even
>if a provider is unreachable, the pages will still be viewable.
>I'll have to configure named to make it work, but I don't think
>it will be too difficult. If you already tried something like
>this, feel free to make comments...


there are many issues regarding security, but I think what you're looking
for is HA (high availability).

As you've always been told, you should mirror your harddisk (RAID). for the
backup, just unmount the mirror-side and make an ufsdump (this is a SUN
command, don't know the linux equivalent). attention: keep backup time as
short as possible, as the new datas won't be saved in this time.

for your cluster, do exactly the same. there are two things that aren't that
easy to handle:

1. how to mirror the 1st system to the 2nd? on SUN there's software which
can do this, which keeps track of the copied files and update them if
necessarly. I suppose you will find something similar on linux too. but keep
in mind, that it can cause heavily network traffic between the two machines,
depending on how often you write on the master system. maybe you need just
for this an extra fast ethernet connection.

generally you should ask yourself, how high the network traffic is, and how
many datas you have to secure. only if you know this, you can design your
solution.

2. if the master system crashes, how can the slave system take it over? I
guess that at least you have to change the IP adress manually, which means
that in this time period your server is down.

maybe you should think also about power. some HA-Server have three power
supplies!

just some thoughts...

bye

Matthias
Technical Details
Message-ID: <36acbe7c.0@news.datacomm.ch>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <slrn7aj5rd.p2.XO*QVV@tardis-a1.ee.ethz.ch> <78cbdc$glv$1@vulcan.alphanet.ch> <slrn7ajl4q.6au.XD*NUP@tardis-a1.ee.ethz.ch>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f4b73,47a69626b085ab62
X-Google-Attributes: gidf4b73,public
From: "Matthias Scherrer" <metti@datacomm.ch>
Subject: Re: High security server
Date: 1999/01/23
Message-ID: <36acbe7c.0@news.datacomm.ch>
X-Deja-AN: 436784355
References: <slrn7aj5rd.p2.XO*QVV@tardis-a1.ee.ethz.ch> <78cbdc$glv$1@vulcan.alphanet.ch> <slrn7ajl4q.6au.XD*NUP@tardis-a1.ee.ethz.ch>
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3
X-Trace: 25 Jan 1999 19:57:00 +0100, 212.254.34.154
Newsgroups: ch.comp.os.linux