1. Main Page |
  2. Highlitghs |
  3. Cluster ICS

Cluster

Cluster mode is designed to synchronize settings between ICS CUBE instances. Modification of settings can be performed by any cluster member.

Free trial How to buy

ICS CUBE Cluster

Description

In cluster mode all settings are divided into two groups: local settings and common settings. Local settings are replicated to all cluster members, but are in effect only on the ICS CUBE, where they were configured. They are also displayed only in the interface of this particular cluster member. Common settings are replicated and take effect for every cluster member.

Note: Internet Service Provider (ISP) and local area network settings are local type settings for every cluster member ; therefore, one should use unique names for ISPs and local area networks.

Cluster ICS

Configuration

Before starting cluster configuration all ICS CUBEs to participate in the cluster should be linked by a single L2 network. It is recommended that a separate network interface card be used for this purpose.

Cluster mode is activated from recovery console: server management → Cluster

First activate cluster module on each ICS CUBE to become cluster member (turn on clustering). Next select one of the ICS CUBEs as the main cluster member. The other cluster members will be connected to it. Selecting one cluster member as main does not mean giving it higher priority - it is merely done for ease of confuguration. All cluster members have equal priority. Then on all cluster members, except main, connect to the cluster (connect to cluster).

Next you will be prompted to create a backup copy of current settings.

Next you will be prompted for the IP address of any cluster member. Input the IP address of the main cluster member.

After connection is made the cluster member will receive the list of current cluster members and synchronize the configuration database.

Important note: When ICS CUBE becomes the cluster member all its settings are replaced by common cluster settings. Therefore it is recommended first to configure the cluster and after that to make other settings.

Important note: After cluster creation, interface address, which is used for link with other cluster members, should not be changed in network settings.

Use web interface to observe the cluster current status: Network → Cluster → Nodes

The list provides information about all cluster members, where IP is a members IP address, and Nuid is the unique cluster member identifier.

Note: the version of the database for all cluster members should be identical.

In case cluster members get out of sync, manual synchronization should be performed: Network > Cluster > Synchronize . This will make all cluster members sync their database with the cluster member having the latest version of the database.

Note: If a backup copy is restored on any cluster member, the database version of this member will revert to old, and cluster will go out of sync . When you force it to synchronize manually all data restored from backup will be lost again.

Common Address Redundancy Protocol (CARP) configuration

Carp

CARP if used to allow several hosts use single IP address within a network segment. Using CARP all cluster members form virtual group (VHID), with whch a virtual IP address is associated. CARP designates virtual MAC address to the group virtual IP address. The virtual IP address should be used as the default gateway address on computers in the local area network. Inside the group one ICS CUBE becomes master while others are designated as backup. Each ICS CUBE can simultaneously be a member of several virtual groups. In case the master ICS CUBE in a group fails, one of the backup ICS CUBEs will be promoted to master, accept the virtual IP address and continue to service the clients. CARP specification demands that all members of a virtual group be physically connected to a single subnetwork. To activate CARP in a local area network one needs to check the box use CARP in the GUI module Providers and networks .

Virtual IP is the IP address of the virtual group. This address should be unique and belong to the subnetwork network, which is configured in local area network settings.

VHID (Virtual host ID) is the identifier used to connect several ICS CUBEs in into one virtual group. VHID takes any numerical value from 1 to 254. If there is a need to use several VHIDs on different network interface within a single ICS CUBE, values of these VHIDs should de unique on every interface to avoid virtual MAC address conflict.

Virtual MAC address is created automatically by the following procedure: 00:00:5e:00:XX, where XX is VHID in hexadecimal. (for example: VHID=1 resulting MAC =00:00:5e:00:01, VHID=254 resulting MAC=00:00:5e:00:FE).

Password is used to authenticate ICS CUBE in its virtual group. Each member of a virtual group should be configured with identical password.

Advertisement base and Advertisement skew parameters, regulating frequency of CARP messages. Advertisement base is measured in seconds and sets interval between CARP announcement messages, Advertisement skew is measured in 1/256-th of second and is used to slow down the rate of CARP messaging from a particular server, by adding this value to the main interval.

Using these parameters you can select which ICS CUBE is designated as the master in a virtual group. For example: there are two ICS CUBEs A (VHID 1) and B (VHID 1). If you need to set A as the master, use the following settings:

  • ICS CUBE A: Advertisement base = 1 Advertisement skew = 100
  • ICS CUBE B: Advertisement base = 1 Advertisement skew = 200

This ICS CUBE A will be more frequent in sending CARP messages and will have greater priority as the master in the virtual group.

Prices are in US Dollars

Product

Licence type
Modules
Antiviruses:
Traffic categories:

Number of users

Advantages

  • Lifetime license
  • Free technical support
  • USB flash installation
  • 35 days for evaluation
  • Video tutorials
  • The development is client-oriented
  • No additional software needed