Hello,

I'm looking for advice about redundant NIC setup, specifically avoiding
single point of failure at the switch. I did see the wiki page on link
aggregations. We use non-stacking switches, which means that all members
would need to connect to the same switch.

Solaris' DLMP fits the bill but it was introduced only in 11.1.

It seems that IPMP could work but not in the global zone (or at least
not in a way that would benefit the local zones). Every non-global zone
would need its own IPMP setup, which is a bit messy & also wasteful in
terms of probe traffic.

Am I missing anything or are these our options? Is there anything else
in the pipe?

Also, how to best separate interfaces from a security point of view? I
think it would be safest to reserve the management network for LOMs.
Would there be any additional benefit to separating the global zone from
the local ones? I mean, if a zone is already compromised, would a
separate NIC or VLAN add any real security? On a dual NIC server, it
wouldn't be a small sacrifice. 

Thanks!


-------------------------------------------
smartos-discuss
Archives: https://www.listbox.com/member/archive/184463/=now
RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00
Modify Your Subscription: 
https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb
Powered by Listbox: http://www.listbox.com

Reply via email to