Solved

Redirect IP traffic to 2nd datacenter

Posted on 2012-04-07
4
802 Views
Last Modified: 2012-06-27
Hi,
I have servers and public IP addresses in 2 distant datacenters, with 100 Mbps fiber optic connectivity between them:

- DataCenter 1 with 32 public IP addresses, ISP controls the IP segment
   Web Servers are here
   Vyatta router here, static routing

- DataCenter 2 with 254 public IP addresses, BGP, my own routing segment
   No web servers here, only routers, VPN...etc
   Mikrotik RouterOS here, BGP+Static routing

Well, what I would like to do is to setup a dozen of WEB sites in DC1, but bind them to public IP addresses from DC2. Mainly for SEO optimization.
The method and performance is not important - important is only the principle, that these web sites must resolve to DC2's IP address and load themselves from DC1, where actual web server is located.

Any idea?
0
Comment
Question by:Andrej Pirman
  • 2
  • 2
4 Comments
 
LVL 37

Accepted Solution

by:
meverest earned 500 total points
Comment Utility
easiest way to do that is to just bridge the lan segments at each datacenter.  You can do this with eoip tunnel with MikroTik, or L2TP with most others.

Requests will still enter via the DC2 site, but those reply packets will be sent via the DC1 (so long as the interim networks don;t try to block it! ;-)
0
 
LVL 18

Author Comment

by:Andrej Pirman
Comment Utility
Excellent!

Just some more info:
Do I need to setup some VPN tunnel between both sites first, and them create EoIP tunnel on top of this VPN?
...or can it be done without VPN tunnel as a base?

Regarding return packets:
wouldn't it be better to create some rule on remote site (DC1) to return packets coming from EoIP tunnel back to this tunnel when they are ponged back?

EDIT:
Hmmm...one more thing:
at DC1 I have Vyatta configured with NAT to local servers,
while at DC2 (with 254 IPs) I don't have NAT, but static routing instead.

any thoughts how this influence the EoIP config?
0
 
LVL 37

Expert Comment

by:meverest
Comment Utility
Hi,

you can usually do it with, or without any initial tunnel but for security you may want to initiate ipsec first.  You could use encrypted pptp as alternative, but watch out for MTU sizes (pptp will consume some overheads that may cause trouble with packet sizes)

you can route return packets back to DC2 is you want to - it just double handles bandwidth between the two sites - if that is not important to you, then that will work just fine!

It doesn't matter if you use NAT or routing at either end.  Once the local nets are bridged, then they act as if your switches are connected together by a cable.

Cheers!
0
 
LVL 18

Author Closing Comment

by:Andrej Pirman
Comment Utility
Thankyo! That was just what I wanted.
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

SSL is a very common protocol used these days when browsing the web.  The purpose is to provide security to communication, but how does it do it?  There are several pieces at work that have to be setup before SSL will even work and it requires both …
Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now