Bacula-users

Re: [Bacula-users] timeout contacting storage daemon on system with multiple interfaces (SOLVED)

2008-06-05 11:18:46
Subject: Re: [Bacula-users] timeout contacting storage daemon on system with multiple interfaces (SOLVED)
From: Blake Dunlap <blake AT ISDN DOT NET>
To: 'Ariano Bertacca' <a.bertacca AT vva DOT de>, "bacula-users AT lists.sourceforge DOT net" <bacula-users AT lists.sourceforge DOT net>
Date: Thu, 5 Jun 2008 10:18:04 -0500
>Imagine:
>Two networks: A = 192.168.1.0/24 and B = 10.1.0.0/24
>The Backup Server contains DIR and SD and has two interfaces:
>192.168.1.10/24 and 10.1.0.10/24.
>FD has one interface (10.1.0.11/24).

>The backup server has a fqdn which is "backup.internal.foo.local".
>Both systems use the same dns and backup.internal.foo.local has one A
>record (192.168.1.10).

>Now: the FD will get backup.internal.foo.local as SD and tries to
>connect. The packet may even be routable, but the answer will always
>come from the wrong ip, because the SD will answer from the nearest
>interface, which would be 10.1.0.10. This could be fixed, but that's
>not the point right now.

>When i add the second A record to the host backup.internal.foo.local i
>will get both addresses and the FD might even check both, but imagine
>other hosts inside the network 192.168.1.0/24 that might not be able
>to reach 10.1.0.0/24. These will now fetch a second A record and might
>fail to connect, since they don't know about 10.1.0.0/24.

>It gets even worse when you transform 192.168.1.0/24 to a valid and
>internet routable address and your servername is something like
>backup.my-domain.com and people from all over the world get your valid
>address, as well as your private ip, which - in this case - would
>definitly be unroutable.

>I don't think that would be a good idea ;)


>Kind regards

>Ariano Bertacca
>Systemmanagement

I have a similar split network setup, where most all clients are on a private 
VLAN with 172 addresses (as well as their real interfaces on another network), 
and a few clients that cannot be on that network because they are offnet / at a 
different site that lacks a distinct SD.

At the moment any time I want to set up an off net client, I have to set up 
host entries (which customers (and I) do not like using, for good reason), 
which I do not believe is a good solution. It would be nice if you could 
specify the name or maybe ip address the client is given for the SD by some 
criteria, other than using a different storage resource, as that breaks 
concurrency limits etc.

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users

<Prev in Thread] Current Thread [Next in Thread>