topic Re: MineMeld in HA in General Topics

MineMeld in HA

andersonjd — Thu, 04 Aug 2016 19:57:36 GMT

Does MineMeld come with any kind of HA facilities? Do you see any issues or can share any gotchas for puting a couple of instances with the same config behind a load ballencer?

Re: MineMeld in HA

lmori — Wed, 17 Aug 2016 21:26:43 GMT

Hi andersonjd,

I can't see a problem with this config.

Re: MineMeld in HA

bspilde — Fri, 19 Aug 2016 15:19:48 GMT

Is there a way to export the configuration file? Or a location that I could setup rsync or something to keep the configuration updated on both "HA" boxes with a script?

Can HA just be built into the code? 🙂 Seems like if we were to depend on this for permitting access to something like O365 IP's it is something that we would want in an HA configuration.

Thanks!

Re: MineMeld in HA

lmori — Mon, 29 Aug 2016 08:01:23 GMT

Hi bsplide,

all the config is stored under /opt/minemeld/local/config as simple text (YAML) files.

You are right, we should work on a solution guide for MineMeld HA. Note that if PAN-OS can't access the EDL URL it will use the last retrieved version of the list.

Re: MineMeld in HA

bspilde — Mon, 29 Aug 2016 14:09:28 GMT

@lmori Would anything need to be restarted if the file were replaced in order to load the new config?

Re: MineMeld in HA

lmori — Mon, 29 Aug 2016 15:52:30 GMT

Yes, you should restart the MineMeld service if config has changed: sudo service minemeld restart

Thanks,
Luigi

Re: MineMeld in HA

dkoh — Thu, 29 Sep 2016 05:29:42 GMT

Hi Imori,

Is there any timeline for minemeld HA capability?

Thanks

Darren koh

@lmori wrote:
Yes, you should restart the MineMeld service if config has changed: sudo service minemeld restart

Thanks,
Luigi