topic Re: R80.40 southbound Geo Cluster hide nat in AWS environment in Cloud Firewall

R80.40 southbound Geo Cluster hide nat in AWS environment

dinkoctlui — Tue, 02 Jun 2020 13:46:32 GMT

Hello

We've deployed a R80.40 southbound Geo Cluster in AWS environment for dealing with east-west and egress Internet traffics.

We don't want to hide nat AWS east-west traffics but only hide nat Internet egress traffics.

My nat policy is in attachment

Every thing works well until I test failover 😞

After the geo cluster failover, egress Internet traffics always match nat rule#4, so making no access to Internet ...

Some one can help ...

Re: R80.40 southbound Geo Cluster hide nat in AWS environment

HeikoAnkenbrand — Tue, 02 Jun 2020 15:44:08 GMT

Hi @dinkoctlui,

You can test the following!

A) Check the cluster failover:

1) Run the script with this command (do not change the syntax):
# $FWDIR/scripts/azure_ha_test.py
2) If all tests were successful, this shows: All tests were successful!
      Otherwise, an error message is displayed with information to troubleshoot the problem.
3) Simulate a cluster failover. For example, shut down the internal interface of the active cluster member:
      # ip link set dev eth1 down/up
      or
      # clusterXL_admin down/up

B) Use an automatic hide NAT rule on the cluster object!

Re: R80.40 southbound Geo Cluster hide nat in AWS environment

vivekanand — Wed, 24 Jun 2020 19:07:43 GMT

Hello,

Did you find a solution to your problem? I am currently trying to deploy a similar architecture and curious to know if your issue is fixed.

Regards,

Vivek