Re: Veritas clustering

[Robert Hajime Lanning <lanning@lanning.cc>]

Have you tried IP Filter?  Do a NAT rewrite.

---- As written by Pradeep Subramaniam:
> 
> 
> I am in the process of clustering a couple of my servers using Veritas
> Cluster server. The final setup will be that one or the other will
> answer to a certain name and IP address.
> 
> The issue I am running into is that these are application servers and
> as such will be initiating connections from within the cluster. This
> poses a problem as the connections are validated by name and IP.
> 
> The Veritas cluster server creates the virtual network interface
> (hme0:1) assigns the pseudo IP of the cluster node to it. Since this is
> not the first entry in the routing table of that machine, connections
> going out of the `cluster' appear to come from the actual machine's IP
> address rather than that of the `cluster'. (See outputs below).
> 
> How would I force them to come from the cluster name and IP? Has anyone
> out there done this before? Thanks in advance.
> 
> Pradeep.
> 
> terra% /usr/sbin/ifconfig -a
> lo0: flags=849<UP,LOOPBACK,RUNNING,MULTICAST> mtu 8232
>         inet 127.0.0.1 netmask ff000000 
> hme0: flags=863<UP,BROADCAST,NOTRAILERS,RUNNING,MULTICAST> mtu 1500
>         inet 192.9.208.252 netmask ffffff00 broadcast 192.9.208.255
> hme0:1: flags=843<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
>         inet 192.9.208.253 netmask ffffff00 broadcast 192.9.208.255
> terra% netstat -rn
> 
> Routing Table:
>   Destination           Gateway           Flags  Ref   Use   Interface
> -------------------- -------------------- ----- ----- ------ ---------
> 192.9.208.0          192.9.208.252         U        4    949  hme0
> 192.9.208.0          192.9.208.253         U        4      0  hme0:1
> 224.0.0.0            192.9.208.252         U        4      0  hme0
> default              192.9.208.2           UG       0    644  
> 127.0.0.1            127.0.0.1             UH       0 137607  lo0
> terra% 
> 
> -- 
> Pradeep Subramaniam,                    | 
> Manager, Systems Administration    	| You can fool some of the people
> E*Trade Technology Corporation		|   all the time, but not all the
> e-mail: pradeep@etrade.ca		|   people all the time.
> phone: (416) 214 7979 			|
> fax:   (416) 214 9065                   | - Yet another brilliant philosopher
> cell:  (416) 806 2328			|
> *******************************************************************************
> 
> 


-- 
/* Robert Hajime Lanning                             lanning@lanning.cc
** Trade: Unix Systems Administrator (Senior level) (SAGE IV)
*/
#include <std_disclaimer.h>