[Pacemaker] Shared Resources using Pacemaker

Andreas Kurz andreas at hastexo.com
Tue Nov 29 17:31:21 EST 2011

On 11/29/2011 05:22 PM, James Horner wrote:
> Hi There
> I am trying to setup a cluster with 2 resource groups that depends on a
> service that only needs to be active once. Both Resource Groups depend
> on this service and I don't want it to be stopped when one moves away
> but I do want it stopped when both resource groups move away.
> The specifics are that Im setting up a failover router system for 2
> public IP ranges (1 per resource group), and I want to use shorewall as
> the firewall (other members of my team not liking cmdline so shorewall
> and webmin = win). The issue is that when both resource groups are on
> one node in the cluster and you move one of them away it will stop
> shorewall rendering the other resource group useless, as shorewall is
> setup to lock down the interfaces when it shuts down.

Do I understand you right: it is ok if one of the IP ranges "moves
away"? ... away to the other node?

If you really want to be able to run the IP ranges on different nodes,
doesn't it make sense to also have shorewall running on both nodes?

Why not making a shorewall clone and run it on both nodes ... in fact
you can also make it independent from the IP groups ... what harm is
done if shorewall is running while no IPs are there where user/services
can connect?


Need help with Pacemaker?

> So far I have implemented an ocf resource that counts how many times you
> have started and stopped shorewall and will only actually shut it down
> when the counter is at 0 but this keeps going wrong (with the count
> hitting -1 and whatnot). Is there a better way to do this?
> Thanks
> HK135
> _______________________________________________
> Pacemaker mailing list: Pacemaker at oss.clusterlabs.org
> http://oss.clusterlabs.org/mailman/listinfo/pacemaker
> Project Home: http://www.clusterlabs.org
> Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> Bugs: http://bugs.clusterlabs.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 286 bytes
Desc: OpenPGP digital signature
URL: <https://lists.clusterlabs.org/pipermail/pacemaker/attachments/20111129/8b08324d/attachment-0003.sig>

More information about the Pacemaker mailing list