KnoppixCLuster Firewall

[new~bie]

I have just started using KnoppixCluster and hope to setup a firewall using KnoppixCluster. How do I go about doing it?

I am hoping to use it with the failover function with 3 PCs so that should anyone of my machines fail, the other will take over. Is this architecture possible?

I am a newbie and do not know much about using Knoppix.

I welcome all possible suggestions and is grateful for any reply.

[UnderScore]

To give you an appropriate answer, I must break down what you are asking.
It sounds like you want to provide redundant or failover capabilities for a linux firewall. Most firewalls provide TCP/IP layers 2,3, & 4 routing & filtering. Clusters are distributed applications across machines for processing (like a Beowulf MPI cluster for scientific applications) or for high availability or guaranteed uptime (http://linux-ha.org/). It sounds like you are using ClusterKnoppix which is based on OpenMosix. OpenMosix clusters typically exist at the "layer 7" or application level of the network. OpenMosix's goal is to provide better processing throughput by delegating & passing around the workload to the best possible nodes.

The type of "clustering" that you are looking for in regards to routers or firewalls is similar to Cisco's HSRP or the more open standard VRRP. I have setup 2 pairs of Cisco routers in HSRP and I must admit it is quite impressive. I have not investigated VRRP in regards to linux other than a quick google. You may infact be able to use linux-ha to work in the way that you want but as far as I know a OpenMosix cluster will not provide hot-standby/failover capabilites in regards to firewalling & routing.

You may want to read these articles at LINUX MAGAZINE:
"Highly-Affordable High Availability" and "Linux Virtual Server Clusters"

I hope this helps.
James

[new~bie]

Thanks alot!

It really help, I am now trying to figure out how it can help me and how do I go about doing it.

Really appreciate your information. Will definately be very useful. :P

[UnderScore]

You are welcome!
If you do come up with some solution then please document it & post it here as I would like to know how it turns out.

James