-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 07/20/2012 01:00 PM, Lawrence K. Chen, P.Eng. wrote: > > > ----- Original Message ----- >>> From: [email protected] [mailto:[email protected]] Sent: Wednesday, >>> July 18, 2012 7:25 PM >>> >>>> Wait ... The firewall guys won't allow you to mount some >>>> remote storage, >>> but >>>> they will allow you to read it and write it? How is that >>>> even possible? >>> >>> The IP network guys have strong restrictions over boxes talking >>> to each other over ethernet >>> >>> the SAN network guys have a big, flat, fiberchannel network >>> with no controls. >>> >>> As a result, two boxes that can't talk to each other on the >>> network can setup a "covert channel" to bypass the access >>> policies and talk to each other over the SAN. >> >> Wait - In GFS, do the nodes actually talk to each other? Or do >> they both just talk to the storage, separately and independently >> of each other? >> >> > > It uses a lock manager, which requires an IP network to > communicate. Though isn't there some way to do IP over the storage > network?
You can run IP over FC, but many clustered filesystems depend on having separate networks for locking and storage to make node failure easier and faster to detect. Skylar -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEUEARECAAYFAlAK4ncACgkQsc4yyULgN4aMSQCY+MacpSB+oCIHfWL7cfecRYYY xQCfTK+bcsqBJsdg9U0iws3f78GAEFk= =pCrj -----END PGP SIGNATURE----- _______________________________________________ Tech mailing list [email protected] https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
