Subject: Re: [vserver] HA vserver in an active/active configuration
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Mon, 4 Feb 2008 23:13:24 +0100

On Mon, Feb 04, 2008 at 10:19:33PM +0900, Christian Balzer wrote:
> On Mon, 4 Feb 2008 09:36:15 +0100 (CET) "Daniel Hokka Zakrisson"
> <daniel@hozac.com> wrote:
> 
> > Christian Balzer wrote:
> > > On Sun, 03 Feb 2008 18:57:11 +0000 Ed W <lists@wildgooses.com> wrote:
> > >>
> > >> I *think* there is an option to set what IP address is actually used
> > >> for localhost?  Forget the details, but check the docs?
> > >>
> > > lback in vserver/interfaces. ^_^
> > 
> > This only applies to 2.3+.
> > 
> Guess it just got ignored and things "worked" because I also made a
> 127.x.x.x interface.
> 
> It is a bit frustrating when doing the RTFM dance (and I do like the
> flower page background) only to be stunted by lack of version specifics.
> 
> Anyways, I searched the archives and other than this question/quest 
> from 2006 (without an answer) I came up blank:
> --- Alexander Kabanov wrote:
> the only reason why I would like to have some kind of local/internal 
> interface inside a guest - let people bind services to something that 
> is not accessible from outside and from other guests on the host 
> server. 

this is true for older patches 2.2 as well as for newer
2.3.x versions which provide the complete loopback is
127.0.0.1 illusion

best,
Herbert

> ----
> 
> So far I was happy with using RCF 1918 or 127/8 addresses to give 
> services something to bind to that is not accessible from the evil
> outside. Now I'm trying to roll out something where the evil might
> be in Misses Jones aka the neighbor vserver. 
> Anything simple/elegant that does not involve writing and maintaining
> 100 (50x2 in a HA cluster) iptables rules?
> 
> Regards,
> 
> Christian
> -- 
> Christian Balzer        Network/Systems Engineer                NOC
> chibi@gol.com   	Global OnLine Japan/Fusion Network Services
> http://www.gol.com/