Firewall / Network isolation inquiry Post: 302300174

Sponsored Content

Special Forums UNIX and Linux Applications Infrastructure Monitoring Firewall / Network isolation inquiry Post 302300174 by avronius on Monday 23rd of March 2009 11:51:32 AM

03-23-2009

Registered User

Firewall / Network isolation inquiry

Good morning folks,

A good friend of mine has a network where every host has two paths to the file servers (two NICs & two networks for all hosts).

Normally speaking, one network will be used for regular application traffic - license servers, itunes library, collaboration tools - while the other will be used for infrastructure traffic - AFS cluster, SNMP, etc.

Currently, the application traffic is saturating both networks, resulting in poor AFP and NFS performance. Ideally, he'd like to firewall the traffic on the host - directing applications to use ports on 192.168.2, while allowing the higher bandwidth (mission critical) traffic to use 192.168.3 without being impacted by the collaboration stuff.

Using the two example networks above, can you recommend what he might need to change / implement in order to isolate services in this fashion?

- Avron

avronius

View Public Profile for avronius

Find all posts by avronius

7 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

uniX iNQUIry from a newbie

hi, i would like to study unix but i don't have the software for me to test the scripts that i read from the book and from the internet. I would like to ask anyones help to please tell me link wer i can download for free the unix system. I would be glad to receive your replies. thanks,

2. Programming

Performance inquiry...guestimate better approach

So, I've been told and heard a million times that malloc and free are expensive calls to be avoided. So many times I avoid malloc by reusing already allocated memory blocks. Store them on free lists somewhere myself and don't call free when I know malloc will be called very shortly thereafter. ...

3. UNIX for Dummies Questions & Answers

Offline Agents Inquiry.

Hello, I currently use Solaris, and typically I use the svcs -a | grep PROCESS to see if it's online or Offline. My questions is SVCS is in solaris but if I want to find out if a daemon or process is offline what other methods can I use? ps -ef | grep PROCESS "what do I look for" or...

4. UNIX and Linux Applications

command to check value of autocommit and isolation level

Hi, Pls let me know command to get following: 1. how to check current value of autocommit 2. how to check current value of isolation level I am using mysql-5.0.26 on unix -Thanks

5. UNIX and Linux Applications

how to change isolation level to READ COMMITTED

Hi, I am using perl DBI and mysql-5.0.26 on unix. Could you please let me know or point to source on how to set isolation level to READ COMMITTED . ~Thanks

6. UNIX for Dummies Questions & Answers

UNIX Inquiry

Hi Everyone! I'm new with UNIX,so, sorry if this question seems really dumb.:( Anyway, I'd just like if it's possible to automatically inform someone (via mail or pop-up box or something) that a file has been recently uploaded/received to the UNIX box? If it is, any advice on how to get that...

7. UNIX for Dummies Questions & Answers

UNIX inquiry for 'awk'

Hello Everyone, May I ask for your help regarding one of the UNIX command “awk”. So I executed a script and the output looks like this (see below): output.txt CONTRACTNAME ...

LEARN ABOUT OSF1

networks

networks(4)						     Kernel Interfaces Manual						       networks(4)

NAME

       networks - Contains network name information

SYNOPSIS

       /etc/networks

DESCRIPTION

       The  networks file contains information about the known networks that comprise the DARPA (Defense Advanced Research Projects Agency) Inter-
       net. Each network is represented by a single line in the networks file.	The format for the entries in the networks  file  is  as  follows:
       Name Number Aliases

       The fields contain the following: The official network name.  The network number.  The unofficial names used for the network.

       Items  on  a  line are separated by one or more spaces or tab characters.  Comments begin with a # (number sign).  Routines that search the
       networks file do not interpret characters from the beginning of a comment to the end of that line.  Network numbers are specified  in  dot-
       ted-decimal notation.  A network name can contain any printable character except a field delimiter, newline character, or comment character
       (#).

       The networks file is normally created from the official network database maintained at the Network Information Center (NIC).  The file  may
       need to be modified locally to include unofficial aliases or unknown networks.

RELATED INFORMATION

       Commands: route(8)

       Functions: getnetbyaddr(3), getnetbyname(3), getnetent(3) delim off

																       networks(4)