topic Active-Active Cluster out of 4 Members in Firewall and Security Management

Active-Active Cluster out of 4 Members

DominikE — Wed, 03 Nov 2021 15:49:28 GMT

Hi,

we are evaluating how we can fix some asynchrony routing issues. For that we think about Active Active Cluster.

How many members can we have per Active Active Clusters? Is it possible and supported to have 4 members in an Active Active Cluster environment, two per Datacenter?

Re: Active-Active Cluster out of 4 Members

PhoneBoy — Wed, 03 Nov 2021 21:13:57 GMT

The question is: are you doing this in Load Sharing more or the Active/Active mode introduced in R80.40?
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_ClusterXL_AdminGuide/Topics-CXLG/Active-Active-Mode.htm?Highlight=geo-cluster

Either way, I think you're limited to four cluster members due to the sync overhead.

Re: Active-Active Cluster out of 4 Members

DominikE — Thu, 04 Nov 2021 06:48:36 GMT

Good Morning,

Thanks for your Quick answer.

We plan to to it with Active Active Cluster, which was newly introduced with 80.40. Four Cluster member would be totally fine for us, in the Documentation, it was not clear if Active Active Cluster is supported with four Members.

We will place the members in two different datacenters in different locations, are there any requirements according to the speed / latency of the sync connection?

Re: Active-Active Cluster out of 4 Members

Martin_Raska — Thu, 04 Nov 2021 10:22:24 GMT

Keep in mind these

In an Active-Active cluster, only these Software Blades are supported:

Firewall
IPS

PMTR-70257	In an Active-Active cluster, all multi-portals are not supported (Mobile Access Portal, Identity Awareness Captive Portal, Data Loss Prevention Portal, and so on).
PMTR-70258	In an Active-Active cluster, NAT on the IP addresses that belong to cluster interfaces is not supported (because it does not survive cluster failover).

Re: Active-Active Cluster out of 4 Members

the_rock — Thu, 04 Nov 2021 13:32:24 GMT

Not sure if below link is applicable in your case though..

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk81300#:~:text=Up%20to%208%20cluster%20members,to%20amount%20of%20Delta%20Sync).

Re: Active-Active Cluster out of 4 Members

DominikE — Tue, 09 Nov 2021 09:54:36 GMT

Hi,

Thanks for all your replays.

We are currently testing a cluster of 4 Active Active nodes per side in our LAB. Looks like this will work for our requirements.