L class 3 node cluster

[Joseph D. Drobnick]

We are creating a 3 node "L" cluster and I was looking for a few opinions:

1) Is there any reason NOT to run the 3 servers in trusted mode?

2) I have a white paper from Kevin Steves @ HP that hardens the O/S for use as Bastion Hosts or web,DNS, and FTP servers. Has anyone "hardened" the O/S when using MC/Service Guard?


Thanks,
Joe Drobnick

[harry d brown jr · Accepted solution]

take a look at this new thread, and James R. Ferguson comments:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xd273972194d6d5118ff40090279cd0f9,00.html

live free or die
harry

[harry d brown jr]

Also, make sure you have the latest MC patches:

http://www.hp.com/products1/unix/operating/hpux11i/infolibrary/building_a_bastion_host.pdf

live free or die
harry

[James R. Ferguson]

Hi:

Two general comments:

1) The issues with MC/ServiceGuard are more that your application needs to be cluster-aware. That is, it must be able to recover (restart) after a service interruption and operate regardless of hostname or IPAddress.

2) Thanks, Harry for the pointer to my other thread ;-)

Regards!

...JRF...