Hi,

  "hot standby" implies a box sitting ("hot") twiddling its thumbs doing
little but waiting for another box to fail ("standby"). It's the VRRP
model.

  There is a HA model which supports dynamic load balancing as well as
active session failover. Nodes in such a cluster are not "standby". They
each have loads that they can shed and add to based upon some heuristic.
A neat attribute of such a system is that an IPsec SA can be established
on node A, move to node B after a while, and come back to A some time
later without any actual node failure. State moves around to keep the
cluster balanced.

  I would very much prefer "session failover" to "hot standby" and a
mild preference of "load balancing" over "load sharing". An HA model
doing VRRP could be termed "session failover" but the HA model described
above really can't be called "hot standby". And load can be shared but
just sharing a load can result in a mis-balanced cluster if sessions on
one node terminate naturally and it sits doing little while another node
whose sessions haven't terminated is huffing-and-puffing. Balancing can
imply sharing but not vice versa.

  regards,

  Dan.

On Tue, March 23, 2010 2:43 pm, Yoav Nir wrote:
> On Mar 23, 2010, at 2:31 PM, Melinda Shore wrote:
>
>> On Tue, March 23, 2010 1:20 pm, Yoav Nir wrote:
>>> - For the cluster with just one member doing IKE and IPsec, I propose
>>> "hot-standby cluster"
>>> - For the cluster with several members doing IKE and IPsec, I propose
>>> to
>>> keep "load-sharing cluster"
>>
>> I think "failover" is in broader use than "hot standby"
>> and would tend to prefer it myself, but I think either is clear.
>>
>> Melinda
>>
> I did not want to use "fault tolerant" because some would take that term
> is broad and sometimes taken to mean things I would not like to specify,
> like RAID arrays, and dual power supplies.  I don't think we should use
> this item to mandate that the two cluster members should not be connected
> to the same power strip.
>
> Anyway, "failover cluster" is OK, except that we've already used
> "failover" to describe an event that happens to both types of clusters.
> So I think we can stay with "hot standby" and "load sharing"
>
> Yoav
>
> _______________________________________________
> IPsec mailing list
> IPsec@ietf.org
> https://www.ietf.org/mailman/listinfo/ipsec
>


_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec

Reply via email to