Penetration Testing mailing list archives
Re: Securing web site with redundancy ?
From: Ben Timby <asp () webexc com>
Date: Fri, 20 Aug 2004 17:57:15 -0500
First of all, what you are asking about is not security related, it is however called high availability this is often implemented as a failover setup (what you described) or NLB, Network Load Balancing. Both of these concepts are closely related, and the solutions are often nearly the same (configuration is different). NLB can be implemented via software, but more often in hardware. MS has Application Center, which has a bunch of IIS related mgmt. tools along with NLB implementation. In contrast you could go the hardware route, and check out F5 (I have used these personally with great success), Coyote Point systems or Cisco Local Director (maybe something else now, have not looked at their stuff recently) to name a few.
If you are looking for a low cost solution, you could go another route, which is to use an apache server running mod_proxy as a reverse proxy. I know there are other mods for apache that allow cookie based server affinity and other neat tricks. You could also look into using the PF firewall on OpenBSD (or FreeBSD) to do blind round robin packet forwarding. Either of these solutions would require you to place a *BSD or Linux machine in front of your Windows boxen to handle the balancing of load.
Hope that helps. Bénoni MARTIN wrote:
Hi all ! I was wondering if there was a way to set up 2 "redundant" web servers (identical web sites), i.e. when one crashes, the other one takes the connection over. The same thing which is already available for firewalls (high disponibility), but with web servers. We would have 2 Windozes in a DMZ with IIS as the web server, and a pix firewall between the dmz and Internet. Is there any tool allowing this out there ? I tried to google quite a while, but without any chance... Some one has an idea ? Cheers list ! ------------------------------------------------------------------------------ Ethical Hacking at the InfoSec Institute. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. Check out our Advanced Hacking course, learn to write exploits and attack security infrastructure. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817 -------------------------------------------------------------------------------
------------------------------------------------------------------------------ Ethical Hacking at the InfoSec Institute. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. Check out our Advanced Hacking course, learn to write exploits and attack security infrastructure. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817 -------------------------------------------------------------------------------
Current thread:
- Securing web site with redundancy ? Bénoni MARTIN (Aug 20)
- Re: Securing web site with redundancy ? Ivan Krstic (Aug 21)
- Re: Securing web site with redundancy ? _ (Aug 21)
- Re[2]: Securing web site with redundancy ? Äóäíàêîâ Ñåðãåé Âÿ÷åñëàâîâè÷ (Aug 22)
- Re: Securing web site with redundancy ? John Kinsella (Aug 21)
- Re: Securing web site with redundancy ? Josh Tolley (Aug 21)
- Re: Securing web site with redundancy ? Jose Maria Lopez (Aug 24)
- RE: Securing web site with redundancy ? Ivan Groenewald (Aug 24)
- Re: Securing web site with redundancy ? Ben Timby (Aug 21)
- Re: Securing web site with redundancy ? A.R. (Aug 21)
- RE: Securing web site with redundancy ? Corey Watts-Jones (Aug 22)
- Re: Securing web site with redundancy ? Volker Tanger (Aug 23)
- Re: Securing web site with redundancy ? aditya shah (Aug 24)
- Re: Securing web site with redundancy ? Volker Tanger (Aug 23)
- <Possible follow-ups>
- RE: Securing web site with redundancy ? Andrew Cathrow (Aug 23)
- RE: Securing web site with redundancy ? Depp, Dennis M. (Aug 23)
- RE: Securing web site with redundancy ? Bénoni MARTIN (Aug 23)
- RE: Securing web site with redundancy ? David Schenz (Aug 24)
- RE: Securing web site with redundancy ? Beaty, Bryan (Aug 24)
- RE: Securing web site with redundancy ? Richard Stevens (Aug 25)
- Re: Securing web site with redundancy ? Ivan Krstic (Aug 21)