topic Re: Virtual firewall in HA with failover ip`s? in General Topics

Virtual firewall in HA with failover ip`s?

baron1234 — Wed, 25 Apr 2018 10:04:54 GMT

Hello, good morning.

I have a virtual firewall vm-300

I'm considering setting up the firewall in HA.

But the company where I have the dedicated servers does not offer me floating ip`s.

But they do offer failover ip's.

It is possible to mount a HA, with failover 's ip's?

There is some other alternative that you can recommend to me to avoid having a single point of failure.

Thank you very much

Re: Virtual firewall in HA with failover ip`s?

BPry — Wed, 25 Apr 2018 12:44:59 GMT

@baron1234,

What exactly would be the end goal of having HA on these firewalls? Usually when you are hosting firewalls within a hosting enviroment there is very little reason to actually configure the firewalls in HA.

Re: Virtual firewall in HA with failover ip`s?

baron1234 — Wed, 25 Apr 2018 12:51:27 GMT

Hello. Behind this firewall there will be services that must have an availability of 99.9%.

The virtual firewall is mounted on the KVM hypervisor and it is mounted on CentOS.

I am concerned that if the server hardware, or the CentOS or the KVM or the Virtual firewall itself fails, I will be unavailable for service...

That's why I want to set up a HA, so I can continue to provide service.

Thanks

Re: Virtual firewall in HA with failover ip`s?

BPry — Wed, 25 Apr 2018 13:26:41 GMT

@baron1234,

The failover IPs would function in an HA Active/Active configuration. Since the firewall would still have seperate interface IPs you would not be ablve to utilize Active/Passive configuration.