We have a few IIS servers that will be acting as front end for our users to split off the load. Currently, we have one IIS with 1 SSL. we are going to do round robining for the FQDN to span a few IIS servers. I just wanted to make sure we would not run into any issues with the certificate. I was thinking of installing it on one server after generating the CSR and then once the root trusted is in place, export it and import it in all the other servers. Do you think this would be an issue at all? is there a better way?
additionally, the certificate is about to expire, I need a certificate with $1mil insurance, what do you think is the best deal (trusted source) going around? should I do the ones with 256bit too or have you seen any conflicts, do they auto negotiate if the client can only support 128bit?
I just setup a round-robin so that my website is always available even if one of the 2 servers goes down. It works like it should, however, i can't access the userdirs from server2. The userdirs are located on server1.
It's setup like this:
www1.domain.org is server1 www2.domain.org is server2www.domain.org is the round-robin. I have 2 WWW's pointed with an A record to each of the server's IP addresses.
On server 1 i have 2 userdirs which are accessible through www1.domain.org/~user . They should also be reachable on www2, because if they are not, they wont be accessible half the time due to the round robin.
I therefore added a .htaccess in www2's root document directory with the following info:
So when i go to www2.domain.org/~user1/, i should be automatically be transferred to server1... but all i get is a 404 error page. It works perfectly when accessed on www1. I don't see what i'm doing wrong. I thought it might be the userDir setting in apache that might be causing trouble.. but that is turned off on server2, so that should not be the problem. Anyone here have any idea how to access the user dirs via server2?
I'm looking to make high availability setup, and wondering how many of you have made it so? we are looking to multi-home the page with a round robin setup, using multiple VPSs/dedicated servers geographically different locations.
Right now i'm still looking at "stale" DNS setup, no automanagement of servers down. Is there a service/software which already offers automatic changes of zones for removing servers which are down, and adding them back when they get back online?
I am trying to do a fail over solution with round robin dns. Our dns is served by windows and our web servers are setup with Linux..
I know round-robin does not by default do a fail over, however my understanding is that a script can be used to remove the failed server for dns, is anyone aware of something that will do this for windows?
It seems the more places we can put servers, the more places boss-man wants them
We're setting up an external network to test back into our network from geographically/carrier diverse locations. We've got about 15 hosts up, but most are in the states, one in london, one in amsterdam, one in frankfurt and one in hong kong.
The current wish list of locations includes -
- Japan - S. Korea - Australia (holy cow bw is expensive in sydney! is anyone charging less than $500 per Mb?) - Paris, France (we have one quote in, but it is pretty pricy) - Italy - Spain - Sweden
I'm doing research and have submitted rfq's to companies in most of these locations, but was hoping for personal recommendations of hosts you have used.
I am experiencing a strange problem with iptables: after in activate them, they are gone in a few minutes. For example, I drop traffic from an ip and after few seconds, all rules are flushed without touching anything!
Do you find iptables enough or do you use a hardware firewall for linux? I haven't used anything less than hardware firewalls for years but I gather than most simply rely on iptables. Is that a smart choice?
# iptables -D INPUT -s 18.104.22.168 -j DROP iptables v1.3.8: Couldn't load target `standard':/usr/local/lib/iptables/libipt_standard.so: cannot open shared object file: No such file or directory What is going on? The libipt_standard.so file is located in /lib/iptables, but not /usr/local/lib/iptables. I tried moving all of the libipt files into the /usr/local/lib/iptables directory, but I got segmentation errors.
[root@localhost ~]# service iptables status Firewall is stopped. [root@localhost ~]# service iptables start Flushing firewall rules: [ OK ] Setting chains to policy ACCEPT: mangle filter [ OK ] Unloading iptables modules: ^[[A [ OK ] [root@localhost ~]# service iptables status Firewall is stopped.
it said iptables is stop...even I start manually...
I am not sure APF is running correctly because of iptables..
CSF dont ban the IP and if manually it is done I get following error. ---------------- csf -d 22.214.171.124 Adding 126.96.36.199 to csf.deny and iptables DROP... iptables: Index of insertion too big DROP all opt -- in !lo out * 188.8.131.52 -> 0.0.0.0/0 Error: iptables command [/sbin/iptables -v -I INPUT 2 -i ! lo -s 184.108.40.206 -j DROP] failed, at line 864 ------------------- Also iptables is not running on server. If status is checked it says its stopped.
I have many sites on my server I dont want to get any downtime.
Please let us know how can we fix this issue as soon as possible.
I have tried reinstall CSF but still the issue remains same.
I keep trying to flush my iptables on my linux server but every time i try to do so my server seems to freeze (i lose access and have to reboot it for it to come back online), how can I go about deleting those ips manually rather than executing the flushing command? what options do I have?
root@xxxx[~]# service iptables status Firewall is stopped. root@xxxx[~]# service iptables start Flushing firewall rules: [ OK ] Setting chains to policy ACCEPT: filter [ OK ] Unloading iptables modules: [ OK ] root@xxxx[~]# service iptables status Firewall is stopped.
i create a template for xen ( hypervm ) from jailtime site. now i install iptables , but iptables do not work and when i enter " service iptables restart" , iptables do not start. ( i check it from "service iptables status" )
I used a script to block some unwanted countries from accessing my site. In total I had about 3000 lines with ipranges. Now I just went ahead and put this on one of the servers, one that I really don't need the traffic on. But I am wondering what kind of affect this may have on the speeds. Will it really affect it more then a few ms? And anything else I should maybe worry about? Except maybe the loading time at reboots.