[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 262
  • Last Modified:

Redundant linux firewall's

i have 1 subnet ... 206.245.146.0/25
i want to setup 2 firewall's that are redundant for this ip block... it is our webhosting block... what is the best approach to do this... i am using linux iptables firewall's... i want to setup maby virutal ip's of our hosted ip's, i don't know...
0
readingeagle
Asked:
readingeagle
  • 2
  • 2
1 Solution
 
ahoffmannCommented:
> .. i want to setup 2 firewall's that are redundant for this ip block.
what do you mean by "redundant"?
0
 
readingeagleAuthor Commented:
i want 2 firewall's with the same external ip address... like hsrp for cisco... 2 externally differnt ip address's and then many similar virutal ip address's
0
 
ahoffmannCommented:
sounds more than a load balancer issue, iptables itself cannot do it
0
 
pjedmondCommented:
The easiest way to do this is probably by using a High availability solution where 1 PC provides the firewall, and in the event of it failing, another PC takes over. This limits the maximum bandwidth to the maximum that 1 PC can cope with. If you are prepared to spend a little more time on the problem then you can look at load balancing.Try looking here:

http://www.ultramonkey.org/

or Redhat's piranha detailed here

http://www.redhat.com/support/wpapers/piranha/x32.html

Which are 'freely' available.

If you want to do this sort of thing on a bigger scale, then you may care to look here:

http://www.high-availability.com/Product/
http://www.openminds.co.uk/high_availability_solutions/
0
 
readingeagleAuthor Commented:
ultramonkey is really good with fedora core 1... i set this up for network load balancing of my spam/virus mail filters... now i have 2 running in a clustered mode using heartbeat fail over and a firewall rule that forwards my ext ip to 2 internal ip's on a "flip flop" connection... if one of the boxes was to be turned off or die, the other box takes over the ip and then both ip's now reside on one box so the forwading from the firewall never stops...
0

Featured Post

A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now