[Linux-HA] 2 subnets separated by cisco 6509 switch

[Lars Marowsky-Bree]

On 2005-03-16T16:01:35, Alan Robertson <alanr at unix.sh> wrote:

Just a minor addition -

> The messaging protocol was written about 5 years ago.  It has always 
> supported more than 2 nodes.   Nothing open source was available at that 
> time.  In fact, only in the last year has anything else open source shown 
> up (one is GPL and one is BSD-licensed).
> 
> And, they still assume that they run on a trusted network - a seriously 
> broken assumption AFAICT.

Well, they just make transport layer security a problem of the transport
layer; OpenAIS for example should work well on top of IP/Sec, and
combined with some firewall rules, that's probably quite strong enough.


Sincerely,
    Lars Marowsky-Brée <lmb at suse.de>

-- 
High Availability & Clustering
SUSE Labs, Research and Development
SUSE LINUX Products GmbH - A Novell Business