NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Partition for Solaris



Hi James,

Drat! You busted me :)

Oh, how I wished to get the best partition sizes the
first time :)

In my experience, I have been lucky to have my data on
separate partitions. The partition I needed to grow
(or I guessed would grow) was on the last slice -- so
I only needed to blow away and restore the one. Luck
:)  You are correct -- you don't have this problem
with a single (or few) partitions.

I also mirror my firewall drives. Since I have my data
on different partitions, I down my box -- ufsdump to
the mirror drive (only the firewall parition), then
reboot.

I can then ufsdump the mirror to tape (which is not
mounted) while my firewall is up -- minimize my
downtime. I'm interested in your thoughts on this,
James. Is there a better way with a single fw?

I am working on a proposal for an high available
environment using dual fw's, and dual ISPs -- both HA
actually. Anyway, I am hoping that I can down one --
back it up -- without and downtime while the other
firewall is up. But, that's only a pipe dream <sigh>.

NOTE: Anyone interested in this thread should consult
and seriously consider what James has to say. That,
and perhaps Lance and his excellent white papers.
Nothing tops their experiences and expertise!

Thanks -- Chris

--- James Edwards <[email protected]> wrote:
> Sorry but it is just not that easy.  
> 
> If you have the partition at the end of the list and
> you have left disk
> space, then it is simple but if you have other
> partitions to deal with,
> those have to be blasted and restored also.  I have
> only been so fortunate
> once in 12 years of doing this stuff.  
> 
> Not only that but think about why would you have to
> increase it?  Usually
> because you screwed up the allocation of disk space
> in the first place (VERY
> easy to do) and have to steal some back from /usr or
> some other partition.
> If all of them are in the same partition, all the
> disk space gets used as it
> is needed and you don't have to worry about trying
> to guess how much you
> will need.  With the big disks we have now, just
> double the amount the
> operating system claims to need and you're ready to
> go.
> 
> As for restoring file systems, putting them in their
> own partitions doesn't
> change that.  In all my years of doing this, I have
> never lost a single
> partition by itself (except for the scenario of
> changing sizes) but have
> lost lots of disk drives.  If I have to restore the
> whole disk, having
> everything in one partition actually makes that
> easier and the amount of
> data is the same.
> 
> Like I said, I used to be one of those who insisted
> everything be separate
> but trying it once changed my mind quick.
> 
> Jim Edwards
> 
> -----Original Message-----
> From: Chris F [mailto:[email protected]]
> Sent: Friday, November 10, 2000 1:29 PM
> To: Doug Schmidt; 'James Edwards'; 'Brian Tan Wee
> Beng';
> [email protected]
> Subject: RE: [FW1] Partition for Solaris 
> 
> 
> 
> Another think to think about is restoring and/or
> growing filesystems.
> 
> Let's say you wish to increase your /opt partition
> (like I did). I have that on a seperate partition. I
> increased it, and ufsdumped just that /opt backup
> from
> tape.
> 
> Quick and easy!
> 
> Just a though! -- Chris
> 
> --- Doug Schmidt <[email protected]> wrote:
> > 
> > With the second option. What happens when you get
> > hit with say a DoS Attack,
> > and the FW is logging, logging away. Until it just
> > crashes, because *all*
> > available
> > disk space is used.
> > 
> > In my opinion, this is just trouble waiting to
> > happen. You would be better
> > off
> > keeping separate partitions.
> > 
> > ~Doug
> > 
> > 
> > 
> > -----Original Message-----
> > From: James Edwards
> > [mailto:[email protected]]
> > Sent: Thursday, November 09, 2000 9:26 AM
> > To: 'Brian Tan Wee Beng';
> > [email protected]
> > Subject: RE: [FW1] Partition for Solaris 
> > 
> > 
> > 
> > This is almost a religious debate.  Some people
> say
> > you should partition all
> > the separate OS file systems (/ /opt /var /usr
> > /export/home swap) into their
> > own partitions and some say just make it one big
> > chunk with the only thing
> > separate being swap.  I used to be one of the
> former
> > persuasion until I
> > tried the latter and I am convinced that is the
> way
> > to go, especially on
> > something like a firewall where you don't have
> users
> > logging in to the
> > operating system.  With the days of having to
> > shoehorn a 1 GB operating
> > system into a 1 GB disk behind us, I take the
> normal
> > 18 GB disk drive and
> > use 4 GB for the root partition (full install of
> > Solaris 8 needs about 2.3
> > GB) , double my memory (or use a minimum of 2 GB)
> > for the swap partition and
> > make the rest for logs.  You can do symbolic link
> to
> > anywhere you like for
> > the log directory.  I would also set up a periodic
> > log switch, move your old
> > logs somewhere else and compress them.  
> > 
> > This works very well for me.
> > 
> > Jim Edwards
> > Systems Manager
> > Texas Secretary of State
> > 
> > 
> > -----Original Message-----
> > From: Brian Tan Wee Beng
> [mailto:[email protected]]
> > Sent: Thursday, November 09, 2000 6:45 AM
> > To: [email protected]
> > Subject: [FW1] Partition for Solaris 
> > 
> > 
> > 
> > Hi,
> >   I'm installing CP on a Solaris machine for the
> > first time.Can someone 
> > supply me with info on how to partition the
> > harddisk,for example size per 
> > partition???My customer requirement is to store
> the
> > logs for a year but i'm 
> > not too sure where exactly are the logs store.Is
> it
> > in the /opt parition or 
> > /var partition??Is there any standard
> > practice??Thanks.
> > 
> > Cheers
> > 
> >
>
_________________________________________________________________________
> > Get Your Private, Free E-mail from MSN Hotmail at
> > http://www.hotmail.com.
> > 
> > Share information about yourself, create your own
> > public profile at 
> > http://profiles.msn.com.
> > 
> > 
> > 
> >
>
============================================================================
> > ====
> >      To unsubscribe from this mailing list, please
> > see the instructions at
> >               
> > http://www.checkpoint.com/services/mailing.html
> >
>
============================================================================
> > ====
> > 
> > 
> >
>
============================================================================
> > ====
> >      To unsubscribe from this mailing list, please
> > see the instructions at
> >               
> > http://www.checkpoint.com/services/mailing.html
> >
>
============================================================================
> > ====
> > 
> > 
> >
>
============================================================================
> ====
> >      To unsubscribe from this mailing list, please
> > see the instructions at
> >               
> > http://www.checkpoint.com/services/mailing.html
> >
> 
=== message truncated ===


__________________________________________________
Do You Yahoo!?
Thousands of Stores.  Millions of Products.  All in one Place.
http://shopping.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.