Subject: Re: [vserver] HA vserver in an active/active configuration
From: Christian Balzer <chibi@gol.com>
Date: Mon, 4 Feb 2008 22:19:33 +0900

On Mon, 4 Feb 2008 09:36:15 +0100 (CET) "Daniel Hokka Zakrisson"
<daniel@hozac.com> wrote:

> Christian Balzer wrote:
> > On Sun, 03 Feb 2008 18:57:11 +0000 Ed W <lists@wildgooses.com> wrote:
> >>
> >> I *think* there is an option to set what IP address is actually used
> >> for localhost?  Forget the details, but check the docs?
> >>
> > lback in vserver/interfaces. ^_^
> 
> This only applies to 2.3+.
> 
Guess it just got ignored and things "worked" because I also made a
127.x.x.x interface.

It is a bit frustrating when doing the RTFM dance (and I do like the
flower page background) only to be stunted by lack of version specifics.

Anyways, I searched the archives and other than this question/quest 
from 2006 (without an answer) I came up blank:
--- Alexander Kabanov wrote:
the only reason why I would like to have some kind of local/internal 
interface inside a guest - let people bind services to something that 
is not accessible from outside and from other guests on the host 
server. 
----

So far I was happy with using RCF 1918 or 127/8 addresses to give 
services something to bind to that is not accessible from the evil
outside. Now I'm trying to roll out something where the evil might
be in Misses Jones aka the neighbor vserver. 
Anything simple/elegant that does not involve writing and maintaining
100 (50x2 in a HA cluster) iptables rules?

Regards,

Christian
-- 
Christian Balzer        Network/Systems Engineer                NOC
chibi@gol.com   	Global OnLine Japan/Fusion Network Services
http://www.gol.com/