Jacob Coby wrote:
>
> Sow now I'm looking into buying a 1U server (1.x p4 celeron, 256mb of ram)
> to act as both a firewall and as the LVS Director
LVS and the filter rules both access netfilter. Unfortunately they
do so in a way that conflicts and it hasn't been possible to make
the two uses compatible (at least in general).
http://www.linuxvirtualserver.org/Joseph.Mack/HOWTO/LVS-HOWTO.patches.html#firewall_on_director
Unless you really know what you're doing, you should have the LVS director
and the firewall on different boxes. If you want high availability
(ie you want to be able to bring down the director for maintenance,
planned or otherwise), then you should plan for two directors.
I have not used a celeron, but without a cache, you're getting half the
performance
for 3/4 the cost. I don't know how important the cost is, but you'd
get better performance with a CPU with some cache on it.
Joe
--
Joseph Mack PhD, High Performance Computing & Scientific Visualization
SAIC, Supporting the EPA Research Triangle Park, NC 919-541-0007
Federal Contact - John B. Smith 919-541-1087 - smith.johnb@xxxxxxx
|