[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Full Cluster - was RE: [FW1] Using Nokia IP650 as Enterprise firewall??
Please allow me to ask one dumpe question, what is "Full Cluster"? Is that like two servers sharing the same disk drive array? Thanks. -raymond At 01:32 PM 1/24/01 -0500, you wrote: >-----BEGIN PGP SIGNED MESSAGE----- >Hash: SHA1 > >Stonebeat has HA and Full Cluster. > >With the Nokias you would need to use a load balancer sandwich >configuration to acheive clustering (that could be the solution regardless >of platform even giving you the ability to use multiple platforms if you >so desired). > > >Carric Dooley >Senior Consultant >COM2:Interactive Media > >"But this one goes to eleven." >- -- Nigel Tufnel > > >On Wed, 24 Jan 2001, Raymond N wrote: > >> >> Thanks for your response. Does StoneBeat offer load balancing also? >> >> -raymond >> >> At 09:34 PM 1/23/01 -0500, you wrote: >> >As for the StoneBeat solution, StoneBeat offers and excellent HA solution. >> >The only problem in this environment is that StoneBeat is not supported for >> >the Nokia platform. You would need to remain with Sun to use the StoneBeat >> >product. >> > >> >If you are interested in StoneBeat and need more information, let me know >> >and I would be happy to provide it. >> > >> >Rick McMaster >> >Sr. Network Security Engineer >> >ePlus Technology >> >http://www.eplus.com >> >Nasdaq: PLUS >> > >> > >> >-----Original Message----- >> >From: [email protected] [mailto:[email protected]] >> >Sent: Tuesday, January 23, 2001 5:49 PM >> >To: Raymond N >> >Cc: [email protected] >> >Subject: Re: [FW1] Using Nokia IP650 as Enterprise firewall?? >> > >> > >> > >> > >> > >> >Raymond: >> > >> > The Nokia IP650 will definitely handle your load. The IP440 should also >> >be >> >able to handle your load but am not as familiar with the specs on this >> >machine >> >(as we use a pair of Nokia IP650s here). On each of our Nokia IP650s we have >> >256MB of memory and a PII processor (448MHz). The IP650s will definitely be >> >able >> >to handle your load and then some. >> > >> > As far as VRRP is concerned.... VRRP was developed by Nokia and as far >> >as I >> >know is only implemented on Nokia equipment. It could be possible that it >> >will >> >work on other platforms but I do not currently know of any yet and I have >> >never >> >heard of anyone implementing it on Sun equipment. >> > >> > As far as an HA environment in regards to Sun equipment is concerned I >> >have >> >heard quite a few people use the Stonebeat Full Cluster product line. But as >> >I >> >have never used this product I am not very familiar with it. Maybe someone >> >from >> >this list could comment? >> > >> > As far as a CheckPoint HA setup, since v4.1 SP2? CheckPoint has >> >encorporated some HA functionality into there code but I have not taken a >> >look >> >at it. Since we use VRRP here I have not really looked into this. >> > >> > Now, my opinion is rather biased but the Nokia platforms are a very >> >solid >> >box. They are very easy to set up out of the box and are a very solid/stable >> >platform. Since you are familiar with Unix (being that your current machine >> >is >> >an Ultra-2 running Solaris 2.x) the jump to a Nokia platform running IPSO >> >(based >> >on FreeBSD) would be rather minor. >> > >> > We basically made the jump that you are thinking about now a couple of >> >years back and the jump was NOT as traumatic as we had originally >> >anticipated. >> > >> > Let me know if you would like more input. >> > >> > >> > >> > >> > >> > >> > >> >Raymond N <[email protected]> on 01/23/2001 02:32:00 PM >> > >> > >> > >> > To: [email protected] >> > >> > cc: (bcc: James E Clukey/Rush/RSH) >> > >> > >> > >> > Subject [FW1] Using Nokia IP650 as Enterprise >> > : firewall?? >> > >> > >> > >> > >> > >> > >> > >> > >> >Hi there, >> > >> >We are currently using Firewall-1 on a Sun Ultra 2 machine. We have about >> >2000 workstations and servers behind it. During the peak period of the >> >day, we have about 1000 to 1500 connection in the Firewall-1 's Active >> >session table. We use both static NAT and hide NAT. So far, the firewall >> >machine is doing well and we doesn't notice any load problem. >> > >> >Now, my question is if you think the Nokia IP650 (or the IP440) would have >> >sufficient (CPU, memory, etc.) capacity to replace the Sun Ultra 2 and >> >handle the current load? Better? >> > >> >Another question is if the VRRP is only available for the Nokia setup, and >> >not for the Sun Ultra 2 machine? I guess my question is if the Checkpoint >> >VRRP solution are built at the Firewall-1 software or at the hardware >> >(Nokia) platform. >> > >> > >> >Thanks in advance. >> > >> >-raymond >> > >> > >> > >> >============================================================================ >> >==== >> > To unsubscribe from this mailing list, please see the instructions at >> > http://www.checkpoint.com/services/mailing.html >> >============================================================================ >> >==== >> > >> > >> > >> > >> > >> >============================================================================ >> >==== >> > To unsubscribe from this mailing list, please see the instructions at >> > http://www.checkpoint.com/services/mailing.html >> >============================================================================ >> >==== >> > >> > >> >> >> >> ============================================================================ ==== >> To unsubscribe from this mailing list, please see the instructions at >> http://www.checkpoint.com/services/mailing.html >> ============================================================================ ==== >> > >-----BEGIN PGP SIGNATURE----- >Version: PGP 6.5.1 >Comment: Made with pgp4pine 1.75-6 > >iQA/AwUBOm8fwVUqWOkDpMZ2EQLu+wCeJTQtRFSAYv1Pax87MebEXulMh9MAoJUZ >AthfdFdX9ZpYzeLZPyehL2p+ >=Glq6 >-----END PGP SIGNATURE----- > > > > ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|