| Sharing experiences for a proper hosted installation [message #124655] |
Thu, 01 October 2015 10:34  |
markus.k1985
Messages: 11
Registered: September 2015
|
|
|
|
Hello,
We have now running an initial setup of the Multi-Server environment.
Setup looks like that:
- Two Security Zones
o Frontend and Backend
o Firewall between them with explicit Port / IP Rules
- Frontend Servers
o 1x Frontend Server
- Backend Servers
o 1x Puppet Master
o 1x Directory Server
o 2x Backend Server
o 1x Management Server (NTP / DNS / DHCP / SNMP Monitoring)
Addition Puppet Configuration:
- NTP
- SNMP
Additional Node Server Configuration:
- Separate Disk on Puppet Master for /var/log
- Separate Disk on Backend Servers for /store and /backup
My open Questions
- SMTP Delivery direct from Backend Servers...
o Not the best setup for me. Maybe add a SMTP delivery relay in Frontend Zone.
o I tried to use the Frontend Proxy as SMTP relay but that produces a loop
- Admin interface only available on Backend Servers...
o We planned to let users manage their domain but port 4040 is not available in Frontend Proxy
o Need to add an Admin-Reverse-Proxy
- How to add an additional Domain in Multi-Server Setup?
o No Documentation
[Updated on: Thu, 01 October 2015 10:34] Report message to a moderator |
|
|
|
| Re: Sharing experiences for a proper hosted installation [message #124678 is a reply to message #124655] |
Thu, 01 October 2015 19:02  |
Bud Durland
Messages: 586
Registered: December 2013
Location: Plattsburgh, NY
|
|
|
|
|
I'm glad somebody got this working. I spent the afternoon yesterday trying get even the first server (puppetmaster) to install, with no luck. I really think this product could be the solution to some performance issues we are having, at least in theory. Maybe with version 10.
|
|
|
|
| Re: Sharing experiences for a proper hosted installation [message #124699 is a reply to message #124678] |
Fri, 02 October 2015 09:47 |
markus.k1985
Messages: 11
Registered: September 2015
|
|
|
|
Hi Bud,
Have you used the Appliance?
I did a lot of deployments in my test Environment last Week and with the correct pre-requirement everything runs smooth.
- DHCP (with DNS and GW configured)
- DNS (with all Kerio Host entrys - forward and reverese)
- Central NTP
- Internet Access (HTTP, HTTPS, FTP AND TCP:11371)
Kind Regards,
Markus
|
|
|
|
| Re: Sharing experiences for a proper hosted installation [message #124713 is a reply to message #124699] |
Fri, 02 October 2015 15:11 |
Bud Durland
Messages: 586
Registered: December 2013
Location: Plattsburgh, NY
|
|
|
|
Multi-server is only available as an appliance, as far as I can tell. I'm not sure what you mean by "correct pre-requirements", but I did this:
I configured a static DHCP lease for the VM.
I made sure that there was a DNS (forward and reverse) entry for the host.
The assigned IP address has unfettered access through our firewall on all ports. I did not set up any incoming port forwarding, as this is all internal for now (and there's not much documentation about what would be required, other than the expected SMTP. POP3, IMAP, etc. ports).
I'm not sure what you mean by "Central NTP", but the we have an NTP server, and it's IP address is configured in the DHCP scope.
|
|
|
|
Members
Search
Help
Register
Login
Home
