RE: Securing web site with redundancy ?

From: Depp, Dennis M. (deppdm@ornl.gov)
Date: Mon Aug 23 2004 - 14:15:15 EDT


You can also look at Microsoft Loadbalancing. This is included with Windows 2003 (all versions) For Windows 2000, you must be running Enterprise Edition. We have used it and it works well.

Dennis

> -----Original Message-----
> From: Volker Tanger [mailto:volker.tanger@detewe.de]
> Sent: Monday, August 23, 2004 10:48 AM
> To: security-basics@securityfocus.com; pen-test@securityfocus.com
> Subject: Re: Securing web site with redundancy ?
>
> > -----Original Message-----
> > From: Bénoni MARTIN [mailto:Benoni.MARTIN@libertis.ga]
> > I was wondering if there was a way to set up 2 "redundant"
> web servers
> > (identical web sites), i.e. when one crashes, the other one
> takes the
> > connection over. The same thing which is already available for
> > firewalls(high disponibility), but with web servers.
> >
> > We would have 2 Windozes in a DMZ with IIS as the web server, and a
> > pix firewall between the dmz and Internet. Is there any
> tool allowing
> > this out there ? I tried to google quite a while, but without any
> > chance...
>
> Lots of:
> - Cisco Load Balancer (or Alteon or F5 or ...), expensive
> - reverse Proxy in between Pix and servers
> - DNS RoundRobin (and checks on the DNS server)
> - Linux Virtual Server - with ICMP redirect
> - STONITH type of scripting on the IIS systems, taking over
> the IP address of the broken system
>
>
> Volker Tanger
>
> --
>
> Managed Services
> Professional Services/IT-Management
> DeTeWe AG & Co. KG
>
> Fon +49 30 6104-3307
> Fax +49 30 6104-665430
> http://www.detewe.de
>
> --------------------------------------------------------------
> -------------
> Computer Forensics Training at the InfoSec Institute. All of
> our class sizes
> are guaranteed to be 12 students or less to facilitate one-on-one
> interaction with one of our expert instructors. Gain the
> in-demand skills of
> a certified computer examiner, learn to recover trace data
> left behind by
> fraud, theft, and cybercrime perpetrators. Discover the
> source of computer
> crime and abuse so that it never happens again.
>
> http://www.securityfocus.com/sponsor/InfoSecInstitute_security
> -basics_040817
> --------------------------------------------------------------
> --------------
>
>

------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.

http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817
-------------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:00 EDT