Network Setup for Multiple Subnets [message #15434] |
Tue, 31 July 2007 04:07  |
moorejon
Messages: 4 Registered: July 2007
|
Junior Member |
|
|
I have been looking through the forums and in the user manual and howtos for a way to accomplish this setup.
I have recently setup the two server HA setup using the howto in the wiki. We then loaded cPanel inside a VE, so that we now have a highly available cPanel server environment. cPanel seems to like to know the public IP address it is licensed under. Seemingly some providers have figured out how to use private IPs for VPS's but still make cPanel happy, but haven't found a working configuration for this setup and it seemingly makes the HA failover setup more complicated. As a result we created the initial network config with the public IP, and this works correctly.
Next we attempt to setup our backup system. We use an internal subnet 172.18.x.x for our backup system which connects via NFS. This is causing some issues for us. Since the standard setup in OpenVZ seems to be a point to point connection and it also seems that all outbound packets are sent via the first IP address assigned to the VE. Our NFS is setup to authenticate based on the domain name assigned to the internal IP. Since the packets appear to come from the public IP the authentication fails. If we swap the order of the IP addresses so that the internal IP address is the first then all outbound network requests to public IPs fail. The NFS connection still fails as the VE can't resolve the hostname of the NFS server. In bound connections via ssh and http to the public IP address do work, but cPanel logins fail due to a "license error."
In the feature list for networking features, it mentions the ability to specify the source IP based on the destination address. This sounds like a simple way to get the results I am looking for. Namely if the VE requests a 172.18.x.x IP address, us its assigned IP in the 172.18.x.x subnet. However I can't find any examples of how to enable this particular feature.
Anyone know how we might fix this setup?
|
|
|