Bacula-users

Re: [Bacula-users] Same Bacula SD on Multiple Networks (VLANs)

2012-05-30 16:00:26
Subject: Re: [Bacula-users] Same Bacula SD on Multiple Networks (VLANs)
From: Josh Fisher <jfisher AT pvct DOT com>
To: Rodrigo Renie Braga <rodrigorenie AT gmail DOT com>
Date: Wed, 30 May 2012 15:57:54 -0400
On 5/30/2012 2:17 PM, Rodrigo Renie Braga wrote:
Hello Josh.

Have you tried restricting the number of concurrent jobs in the device
definition in bacula-sd, as opposed to elsewhere? for example:

Yes, it already is set to only 1 concurrent Job in bacula-sd.conf, but the problem is that, in my SD server, I have multiple IP address on multiple different VLANs. And in Bacula, one Storage definition can only have one IP address, so I had to create different Storage definition, one for each VLAN, but all pointing to the same Device in bacula-sd.conf. Although Bacula thinks I have several SD, each one with 1 concurrent Job max, in the end, there is only one Device in bacula-sd limiting to run only one Job at a time.

That works great, but my problem is another: when a Job gets upgraded from Inc to Full (because is a new client config in bacula-dir.conf), the Director use the wrong Storage to write to the Full pool.

I see. Because the Director tells the FD client to use the address in the bacula-dir.conf Storage definition for contacting the SD, you defined a different Storage definition for each VLAN.

I think there might be another way to do this. If you are using bind 9, you can setup views in DNS so that clients get a different IP when looking up the same hostname depending on what VLAN they belong to. Then, you set the address of a single Storage definition in bacula-dir.conf to the hostname of the SD server. For the Storage definition in bacula-sd.conf, use the Addresses keyword to specify multiple listen addresses, one IP for each VLAN (which you probably already have done). The Director will tell clients that the SD is located at a hostname, rather than a specific IP address. When the client looks up the hostname, it will get the address of the SD on the same VLAN that the client is on. Since there is only one Storage definition, upgrades from inc to full will "just work". The Maximum Concurrent Jobs = 1 in the Device definitions will prevent more than one job from using the same device at the same time.

# Example named.conf for two VLANs
acl "vlan1_hosts" {
  192.168.1.0/24;
}
acl "vlan2_hosts" {
  192.168.2.0/24;
}
...
view "vlan1_view" {
  match-clients { vlan1_hosts; };
  zone "." {
    type hint;
    file "db.root";
  }
 ... etc.
  zone "example.local" {
    type master;
    file "example.local.for.vlan1";
  }
  zone "1.168.192.in-addr.arpa" {
    type master;
    file "192.168.1.db";
  }
}
view "vlan2_view" {
  match-clients { vlan2_hosts; };
  zone "." {
    type hint;
    file "db.root";
  }
 ... etc.
  zone "example.local" {
    type master;
    file "example.local.for.vlan2";
  }
  zone "2.168.192.in-addr.arpa" {
    type master;
    file "192.168.2.db";
  }
}
# eof


In short: I have the options "Full Pool" and "Incremental Pool" in the Job, but I don't have a "Full Storage" and "Incremental Storage" to tell Bacula to also change the Storage when the Job is upgraded from Inc to Full...

I guess is really hard to understand my problem, but I'll post a summary of my Bacula configs to try to clarify. But thank you very much for your help.


------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/


_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users