topic Re: vSZ behind router, add 2nd node to cluster in SmartZone and Virtual SmartZone

vSZ behind router, add 2nd node to cluster

sureal_alamsjah — Sun, 29 Nov 2020 20:18:56 GMT

Hi all,

We have a vSZ running with 3 interfaces behind a router.

Now we want to add a 2nd node to this cluster, also with 3 interfaces. This 2nd node is at a remote site and also behind a router. What ports should we forward in order to have te cluster interfaces to communicate?

Re: vSZ behind router, add 2nd node to cluster

harald_thomas_c — Sun, 29 Nov 2020 21:17:04 GMT

Hi sureal,

you need 100 Mbit as minimum speed only for the cluster traffic and a max latency of 9 ms.

if your line does not give you this values, the cluster will never get synchronised.

cheers

harald

Re: vSZ behind router, add 2nd node to cluster

eizens_putnins — Sun, 29 Nov 2020 22:19:54 GMT

Completely agree with Harald,

It's a really bad idea, cluster doesn't work over Internet links. Don't even try! Even if you will be able to install it, you are guaranteed to have problems later, as Internet isn't stable enough.

This can be done only if you have 2 locations, which are not actually that remote, but say in the same city and connected by direct fiber link, preferred -- L2. Than cluster will work normally, same way, as when all nodes are located in one server room.

Hope it helps.

Re: vSZ behind router, add 2nd node to cluster

sureal_alamsjah — Mon, 30 Nov 2020 07:20:35 GMT

Thanks for your input guys.

Suppose we meet the conditions described above, and both nodes are behind NAT routers, what port(s) should be forwarded for the cluster interfaces to connect?

Re: vSZ behind router, add 2nd node to cluster

harald_thomas_c — Mon, 30 Nov 2020 07:37:40 GMT

Build a vpn between both networks, that would be the easiest way.

The exact ports are in the vsz documentation.

Re: vSZ behind router, add 2nd node to cluster

diego_garcia_de — Mon, 30 Nov 2020 13:52:26 GMT

I'm not sure clustering is supported behind nat. I'd be very surprised if it works at all. As others mentioned, a vpn is your best bet as I don't think the clustering interfaces are nat aware -as opposed to the main AP-facing nic.

Re: vSZ behind router, add 2nd node to cluster

trevor_stevens_ — Wed, 02 Dec 2020 16:05:08 GMT

In SZ 5.2 a 1-to-1 NAT is supported and it can be configured under the cluster config.

Re: vSZ behind router, add 2nd node to cluster

diego_garcia_de — Wed, 02 Dec 2020 16:29:06 GMT

Hi Trevor, that's great to know. Is it supported for all 3 interfaces? It used to be the case that it was only for the AP facing NIC if memory doesnt fail me.