EFW Support

Support => Installation Support => Topic started by: rossnick on Wednesday 15 September 2010, 12:38:12 am



Title: High availability and other questions in 2.4 ?
Post by: rossnick on Wednesday 15 September 2010, 12:38:12 am
Hi !

I am begining to play with endian community edition to see if it could replace our front-end firewalls that are in front of our server farm. Curently, it's 2 centos 5 in High availability cluster usging heartbeat.

There a some services that run ON the firewall box itself, like named, and a php/httpd server to serve lightly-dynamic pages in case of maintenance.

First off, I can't seem to enable High availability, as it's not present in the service menu. Any hints on why ?

Next, If I install a php/httpd server to suite my maintenance page needs, can it be started automaticly ?

Also, in my case, there won't be any user computers connected to this netwrok, only servers. Our own stations are located elsewhere and served by another isp, and router. So I won't need the "green" zone. Can it be disabled or the like ?



Title: Re: High availability and other questions in 2.4 ?
Post by: mrkroket on Wednesday 15 September 2010, 12:55:46 am
About php/httpd server, endian has one to serve the GUI, so you could hook your page over there, on /home/httpd

High Availability:
There is no HA on Endian Community, you must  the Enterprise.
Besides that, if you are on a critical environment, I can't recommend EFW Community as it doesn't get almost any update/fixes, not even the critical ones.
So your options are: 1)  the EFW Enterprise  2) Fix/upgrade EFW Community by yourself 3) Search another option that gives what you need.

Endian is based on Red Hat Entrerprise. So to enable HA on it you must bring the sources to Linux-HA and other stuff.
 A hard work because it doesn't work out of the box. Probably it doesn't worth the effort.


Title: Re: High availability and other questions in 2.4 ?
Post by: rossnick on Wednesday 15 September 2010, 02:37:21 am
 :(
Thanks, that way, I'll stick with my existing solution and install snort on it.
I've also made some search and found ClearOS, that could be another solution. I'll also dig that.