KnoppixCLuster Firewall

[new~bie]

I have just started using KnoppixCluster and hope to setup a firewall using KnoppixCluster. How do I go about doing it?

I am hoping to use it with the failover function with 3 PCs so that should anyone of my machines fail, the other will take over. Is this architecture possible?

I am a newbie and do not know much about using Knoppix.

I welcome all possible suggestions and is grateful for any reply. :D

[UnderScore]

To give you an appropriate answer, I must break down what you are asking.
It sounds like you want to provide redundant or failover capabilities for a linux firewall. Most firewalls provide TCP/IP layers 2,3, & 4 (http://en.wikipedia.org/wiki/TCP/IP) routing & filtering. Clusters are distributed applications across machines for processing (like a Beowulf MPI cluster for scientific applications (http://www-unix.mcs.anl.gov/mpi/mpich/)) or for high availability or guaranteed uptime (http://linux-ha.org/). It sounds like you are using ClusterKnoppix (http://bofh.be/clusterknoppix/) which is based on OpenMosix. OpenMosix clusters typically exist at the "layer 7" or application level of the network. OpenMosix's goal is to provide better processing throughput by delegating & passing around the workload to the best possible nodes.

The type of "clustering" that you are looking for in regards to routers or firewalls is similar to Cisco's HSRP (http://www.webopedia.com/TERM/H/HSRP.html) or the more open standard VRRP (http://www.webopedia.com/TERM/V/VRRP.html). I have setup 2 pairs of Cisco routers in HSRP and I must admit it is quite impressive. I have not investigated VRRP in regards to linux other than a quick google. You may infact be able to use linux-ha to work in the way that you want but as far as I know a OpenMosix cluster will not provide hot-standby/failover capabilites in regards to firewalling & routing.

You may want to read these articles at LINUX MAGAZINE (http://www.linux-mag.com/):
"Highly-Affordable High Availability" (http://www.linux-mag.com/2003-11/availability_01.html) and "Linux Virtual Server Clusters" (http://www.linux-mag.com/2003-11/clusters_01.html)

I hope this helps.
James

[new~bie]

Thanks alot! :D

It really help, I am now trying to figure out how it can help me and how do I go about doing it.

Really appreciate your information. Will definately be very useful. :P

[UnderScore]

You are welcome! 8)
If you do come up with some solution then please document it & post it here as I would like to know how it turns out.

James