It would be manual. Someone would have to enable a firewall/switch port,
or move a wire.
Ray Mrohs
U.S. Department of Justice
202-307-6896
________________________________
From: The IBM z/VM Operating System
[mailto:[EMAIL PROTECTED] On Behalf Of Huegel, Thomas
Sent: Monday, September 24, 2007 4:14 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: VM SSL Appliance with TCP/IP
Hi Ray,
I don't have any answers, but I am a little curious.
If there is a failure someplace between your front end SSL
processor and z/VM TCPIP how will you switch over to the backup?
Is there some failover built in or will it be manual?
Tom
-----Original Message-----
From: The IBM z/VM Operating System
[mailto:[EMAIL PROTECTED] Behalf Of Mrohs, Ray
Sent: Monday, September 24, 2007 2:32 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: VM SSL Appliance with TCP/IP
Hi,
We are in the process of hooking up 2 SSL front ends for
our VM TN3270 traffic. One box wil be primary, the other backup. For
full redundancy, I plan to use 2 OSA ports (separate cards), and 2
TCP/IP stacks in VM. The SSL boxes will be configured identically and
cabled directly to the OSAs to eliminate unencrypted data passing
through a router. One box, along with it's associated OSA and TCP/IP
stack, will be sitting idle 99.999% of the time. Each box is sized to
carry the full workload.
Are there any additional/better/simpler ways to enhance
availability or reliability? BTW, SSLSERV is not an option for us, since
we need to support 1200 concurrent user sessions.
Ray Mrohs
U.S. Department of Justice
202-307-6896
________________________________
<< ella for Spam Control >> has removed 12999 VSE-List messages and set
aside 12268 VM-List for me
You can use it too - and it's FREE! www.ellaforspam.com
