----- Original Message -----
> > From: [email protected] [mailto:[email protected]]
> > Sent: Wednesday, July 18, 2012 7:25 PM
> > 
> > > Wait ... The firewall guys won't allow you to mount some remote
> > > storage,
> > but
> > > they will allow you to read it and write it?  How is that even
> > > possible?
> > 
> > The IP network guys have strong restrictions over boxes talking to
> > each
> > other over ethernet
> > 
> > the SAN network guys have a big, flat, fiberchannel network with no
> > controls.
> > 
> > As a result, two boxes that can't talk to each other on the network
> > can
> > setup a "covert channel" to bypass the access policies and talk to
> > each
> > other over the SAN.
> 
> Wait - In GFS, do the nodes actually talk to each other?  Or do they
> both
> just talk to the storage, separately and independently of each other?
> 
> 

It uses a lock manager, which requires an IP network to communicate.  Though 
isn't there some way to do IP over the storage network?
_______________________________________________
Tech mailing list
[email protected]
https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to