high availability with splat

[jackharv]

has anyone implemented high availability using secure platform? currently using Nokia appliances with vrrp for failover, but would like to explore using splat on less expensive hardware. Direction appreciated.

[Peter]

I have 2 installations of clusters in HA mode (R55) and 1 in LB mode (unicast, R60). All of them are under SPLAT for modules and under Windows 2000/2003 for Smart Servers. Thare were some problems with HP Switches (LACP must be disabled). Actually I have some minor problems with my cluster under R60 (with Policy Server). Other parts work good.

I think that SPLAT and good hardware (any brand-name servers) are really the best choice for your cluster, better then Nokia, because you can change your hardware configuration as you want and reinstall it any time you want.

[chillyjim]

Originally Posted by jackharv

has anyone implemented high availability using secure platform? currently using Nokia appliances with vrrp for failover, but would like to explore using splat on less expensive hardware. Direction appreciated.

ClusterXL HA and LB both work well. In "New mode" there are issues with some switches (Same ones as Nokia's IP Cluster) to do with multicast mac addresses on unicast IP addresses (Which is valid under the RFCs).

Nokia has a good document on how to fix your switches (I don't have access to it anymore).

Unicast/piviot mode fixes these problems.

One thing to note if using "New Mode" (multicast), do NOT use Extreme switches, they are very broken.