topic SYNC SET-UP in General Topics

SYNC SET-UP

Enyi_Ajoku — Thu, 27 Sep 2018 18:06:53 GMT

Hello Folks,

I have 2 Data Centers that are about to be built, consultant is recommending having 2 15400 in DC1 and another 2 in DC2. They intend to have VSX configured on both Data Centers, which we would be one cluster with four cluster members.

DC1 and DC2 are miles apart probably 50 miles apart.

My question is with regards to VSX and sync interface on the 15400.

Consultant intends to take fiber interfaces on the 15400 and use them as SYNC Interfaces/Network.

Can this be done?

Thank You

Re: SYNC SET-UP

JozkoMrkvicka — Thu, 27 Sep 2018 18:27:48 GMT

The best would be to use fiber ports. Even better to create bond interface with 1G fibers.

As both nodes are 50 miles apart, switch-in-between needs to be used.

Re: SYNC SET-UP

Enyi_Ajoku — Thu, 27 Sep 2018 18:38:19 GMT

How do i configure bond for SYNC interface. I can't find this option in vsx_util?

Re: SYNC SET-UP

JozkoMrkvicka — Thu, 27 Sep 2018 19:21:26 GMT

By using clish commands as is described in Gaia Administration Guide - Chapter "Network Management" - Network Interfaces - Bond Interfaces (Link Aggregation).

How to view details about the bond interface

Sync Redundancy in ClusterXL

Re: SYNC SET-UP

Danny — Thu, 27 Sep 2018 21:06:34 GMT

Some documents you might want to read regarding max. allowed latency (100ms) and packet loss rate (5%) on your sync network.

ClusterXL R80.10 (Part of Check Point Infinity) Administration Guide

Synchronizing Connection Information Across the Cluster

ClusterXL R77 Versions Administration Guide

Re: SYNC SET-UP

Vladimir — Thu, 27 Sep 2018 21:40:13 GMT

While it is not impossible, I question the reason behind this design.

Consider: you will not only have to use Sync between sites, but shuttle internal and external traffic as well, if the cluster is failing over to another site.

So you'll saturate the link with normal site-2-site traffic, sync and everything that normally traversing local VS's.

Depending on link or interface buffer saturation, sync may get deprioritized.

Can someone tell me if I'm off in my assumptions?

Re: SYNC SET-UP

Colin_Campbell1 — Thu, 27 Sep 2018 23:42:06 GMT

Hi,

As long as you have reliable layer 2 connectivity between the sites meeting the ClusterXL requirements for timeouts, rtt, packet loss etc, you should be fine. I was running a cluster with one member in LA and the other in Dallas, which is about 2000km.

Re: SYNC SET-UP

Enyi_Ajoku — Sun, 30 Sep 2018 21:49:48 GMT

Yes i do, my layer 2 devices are fiber ports and the native sync port on the 15400 are Ethernet ports. Based on the test i've done and to my knowledge the only time this will works is in a fresh install. I tried to change or create a SYNC in my existing VSX infrastructure and that didnt work. But i could assign a different port when i tried it on my fresh out of the box 15400.