NLB

[ankit0680]

Hello,
I have been searching for a while, I have been given the task to look into NLB clustering. WE currently have one server with ip x.x.x.xx6 adn we own the next five consecutive IP's. from waht I read it is amatter of enablign NLB then giving the .6 Ip as the NLB (sHadowIP) adn givign ..7 adn ..8 to the new servers.
Does anyone have a good simpler explained document on this?

 

[penauroth]

A little more secure method is to allocate a private IP address for all of your servers and use one public IP address for the cluster IP. You will be able to minimize the attack surface on your server systems by doing it this way. In addition, setup all of your web servers to use a hostheader to respond only to the cluster name. This will prevent clients from connecting directly to a cluster node.

I hope this helps.



Paul

Work on Windows, play on Linux.

 

[ankit0680]

I think thats What I was thinking I just did not communicate my thoughts properly. Any Adive on how to do this.

 

[penauroth]

How are the servers setup on your network? Are they internal or are they in a DMZ?

1. Setup your servers to use private IP's
2. You can use the NLB manager or you can use the MS KB article

http://support.microsoft.com/kb/323431/en-us

to setup the NLB clustering. Make sure you use one of your public IP's for the clustering
3. Then use this KB article (

http://support.microsoft.com/kb/324287/en-us)

to setup your host headers
4. Configure DNS to associate DNS name with cluster IP





Paul

Work on Windows, play on Linux.

 

[ankit0680]

Thanks. I have DNS setup through my hosting company. I have both servers in the DMZ with Static External IP's already.
Thanks alot.